username/flaskpaste
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

containerfile: force reinstall jaraco.context to fix GHSA-58pv
Some checks failed
CI / Security Scan (push) Successful in 19s
Details
CI / Lint & Format (push) Successful in 22s
Details
CI / Advanced Security Tests (push) Successful in 16s
Details
CI / Memory Leak Check (push) Successful in 20s
Details
CI / Security Tests (push) Successful in 25s
Details
CI / Unit Tests (push) Successful in 33s
Details
CI / Fuzz Testing (push) Successful in 24s
Details
CI / SBOM Generation (push) Successful in 20s
Details
CI / Harbor Vulnerability Scan (push) Has been cancelled
Details
CI / Build & Push Image (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Username
2026-01-20 08:23:53 +01:00
parent 66d7948073
commit 329563f4b9
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
Containerfile.slim
View File

@@ -20,7 +20,8 @@ RUN pip install --no-cache-dir --upgrade "pip>=25.3" wheel
# Install Python dependencies (includes security pins from requirements.txt)
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt gunicorn
RUN pip install --no-cache-dir -r requirements.txt gunicorn && \
pip install --no-cache-dir --force-reinstall "jaraco.context>=6.1.0"
# Stage 2: Alpine runtime (minimal)
@@ -32,7 +33,9 @@ LABEL description="Minimal secure pastebin REST API (Alpine)"
# Apply security fixes to base image (versions from requirements.txt)
COPY requirements.txt /tmp/
RUN pip install --no-cache-dir --upgrade pip && \
pip install --no-cache-dir -r /tmp/requirements.txt && rm /tmp/requirements.txt
pip install --no-cache-dir -r /tmp/requirements.txt && \
pip install --no-cache-dir --force-reinstall "jaraco.context>=6.1.0" && \
rm /tmp/requirements.txt
# Create non-root user
RUN addgroup -g 65532 -S flaskpaste && adduser -u 65532 -S -G flaskpaste flaskpaste