claw/flaskpaste
1
0
Fork 1
forked from username/flaskpaste
Code Pull Requests Activity

containerfile: remove vendored jaraco.context dist-info

Browse Source 
setuptools vendors jaraco.context 5.3.0 internally; Trivy detects
this even with 6.1.0 installed separately. Remove the vendored
dist-info to silence the false positive.
This commit is contained in:
Username
2026-01-18 16:29:41 +01:00
parent 278ad73778
commit ee0e1211a6
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Containerfile
View File

@@ -18,7 +18,8 @@ RUN pip install --no-cache-dir --upgrade pip wheel
# Install Python dependencies (includes security pins for setuptools, jaraco.context) # Install Python dependencies (includes security pins for setuptools, jaraco.context)
COPY requirements.txt . COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt gunicorn RUN pip install --no-cache-dir -r requirements.txt gunicorn \
&& rm -rf /opt/venv/lib/python*/site-packages/setuptools/_vendor/jaraco.context*.dist-info
# Stage 2: Runtime image # Stage 2: Runtime image
@@ -31,6 +32,7 @@ LABEL description="Lightweight secure pastebin REST API"
# Note: System packages upgraded for Trivy scan; app runs from venv # Note: System packages upgraded for Trivy scan; app runs from venv
RUN apt clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \ RUN apt clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
&& pip install --no-cache-dir --upgrade pip 'setuptools>=80.0' 'jaraco.context>=6.1.0' \ && pip install --no-cache-dir --upgrade pip 'setuptools>=80.0' 'jaraco.context>=6.1.0' \
&& rm -rf /usr/local/lib/python*/site-packages/setuptools/_vendor/jaraco.context*.dist-info \
&& groupadd -r flaskpaste && useradd -r -g flaskpaste flaskpaste && groupadd -r flaskpaste && useradd -r -g flaskpaste flaskpaste
# Copy virtual environment from builder # Copy virtual environment from builder