forked from username/flaskpaste
containerfile: pin wheel>=0.46.2 (CVE-2026-24049)
This commit is contained in:
@@ -13,7 +13,7 @@ RUN apk add --no-cache gcc musl-dev libffi-dev
|
||||
# Create virtual environment and upgrade pip
|
||||
RUN python -m venv /opt/venv
|
||||
ENV PATH="/opt/venv/bin:$PATH"
|
||||
RUN pip install --no-cache-dir --upgrade pip wheel
|
||||
RUN pip install --no-cache-dir --upgrade pip 'wheel>=0.46.2'
|
||||
|
||||
# Install Python dependencies (includes security pins from requirements.txt)
|
||||
COPY requirements.txt .
|
||||
|
||||
Reference in New Issue
Block a user