forked from username/flaskpaste
containerfile: upgrade base image pip and jaraco.context
This commit is contained in:
@@ -30,6 +30,9 @@ FROM python:3.11-alpine
|
||||
LABEL maintainer="FlaskPaste"
|
||||
LABEL description="Minimal secure pastebin REST API (Alpine)"
|
||||
|
||||
# Upgrade base image pip to fix CVE-2025-8869
|
||||
RUN pip install --no-cache-dir --upgrade "pip>=25.3" "jaraco.context>=6.1.0"
|
||||
|
||||
# Create non-root user
|
||||
RUN addgroup -g 65532 -S flaskpaste && adduser -u 65532 -S -G flaskpaste flaskpaste
|
||||
|
||||
|
||||
Reference in New Issue
Block a user