forked from username/flaskpaste
containerfile: pin wheel>=0.46.2 (CVE-2026-24049)
This commit is contained in:
@@ -13,7 +13,7 @@ RUN apk add --no-cache gcc musl-dev libffi-dev
|
|||||||
# Create virtual environment and upgrade pip
|
# Create virtual environment and upgrade pip
|
||||||
RUN python -m venv /opt/venv
|
RUN python -m venv /opt/venv
|
||||||
ENV PATH="/opt/venv/bin:$PATH"
|
ENV PATH="/opt/venv/bin:$PATH"
|
||||||
RUN pip install --no-cache-dir --upgrade pip wheel
|
RUN pip install --no-cache-dir --upgrade pip 'wheel>=0.46.2'
|
||||||
|
|
||||||
# Install Python dependencies (includes security pins from requirements.txt)
|
# Install Python dependencies (includes security pins from requirements.txt)
|
||||||
COPY requirements.txt .
|
COPY requirements.txt .
|
||||||
|
|||||||
Reference in New Issue
Block a user