forked from username/flaskpaste
containerfile: pin pip>=25.3 to fix CVE-2025-8869
This commit is contained in:
@@ -16,7 +16,7 @@ RUN apk add --no-cache gcc musl-dev libffi-dev
|
|||||||
# Create virtual environment and upgrade pip
|
# Create virtual environment and upgrade pip
|
||||||
RUN python -m venv /opt/venv
|
RUN python -m venv /opt/venv
|
||||||
ENV PATH="/opt/venv/bin:$PATH"
|
ENV PATH="/opt/venv/bin:$PATH"
|
||||||
RUN pip install --no-cache-dir --upgrade pip wheel
|
RUN pip install --no-cache-dir --upgrade "pip>=25.3" wheel
|
||||||
|
|
||||||
# Install Python dependencies
|
# Install Python dependencies
|
||||||
COPY requirements.txt .
|
COPY requirements.txt .
|
||||||
|
|||||||
Reference in New Issue
Block a user