containerfile: upgrade base image pip and jaraco.context
Some checks failed
CI / Security Scan (push) Successful in 20s
CI / Lint & Format (push) Successful in 22s
CI / Advanced Security Tests (push) Successful in 15s
CI / Memory Leak Check (push) Successful in 19s
CI / Security Tests (push) Successful in 25s
CI / Unit Tests (push) Successful in 33s
CI / Fuzz Testing (push) Successful in 24s
CI / Harbor Vulnerability Scan (push) Has been cancelled
CI / SBOM Generation (push) Has been cancelled
CI / Build & Push Image (push) Has been cancelled

This commit is contained in:
Username
2026-01-20 08:19:41 +01:00
parent aba81f908e
commit 677cdff58d

View File

@@ -30,6 +30,9 @@ FROM python:3.11-alpine
LABEL maintainer="FlaskPaste"
LABEL description="Minimal secure pastebin REST API (Alpine)"
# Upgrade base image pip to fix CVE-2025-8869
RUN pip install --no-cache-dir --upgrade "pip>=25.3" "jaraco.context>=6.1.0"
# Create non-root user
RUN addgroup -g 65532 -S flaskpaste && adduser -u 65532 -S -G flaskpaste flaskpaste