containerfile: upgrade base image pip and jaraco.context
Some checks failed
CI / Security Scan (push) Successful in 20s
CI / Lint & Format (push) Successful in 22s
CI / Advanced Security Tests (push) Successful in 15s
CI / Memory Leak Check (push) Successful in 19s
CI / Security Tests (push) Successful in 25s
CI / Unit Tests (push) Successful in 33s
CI / Fuzz Testing (push) Successful in 24s
CI / Harbor Vulnerability Scan (push) Has been cancelled
CI / SBOM Generation (push) Has been cancelled
CI / Build & Push Image (push) Has been cancelled
Some checks failed
CI / Security Scan (push) Successful in 20s
CI / Lint & Format (push) Successful in 22s
CI / Advanced Security Tests (push) Successful in 15s
CI / Memory Leak Check (push) Successful in 19s
CI / Security Tests (push) Successful in 25s
CI / Unit Tests (push) Successful in 33s
CI / Fuzz Testing (push) Successful in 24s
CI / Harbor Vulnerability Scan (push) Has been cancelled
CI / SBOM Generation (push) Has been cancelled
CI / Build & Push Image (push) Has been cancelled
This commit is contained in:
@@ -30,6 +30,9 @@ FROM python:3.11-alpine
|
||||
LABEL maintainer="FlaskPaste"
|
||||
LABEL description="Minimal secure pastebin REST API (Alpine)"
|
||||
|
||||
# Upgrade base image pip to fix CVE-2025-8869
|
||||
RUN pip install --no-cache-dir --upgrade "pip>=25.3" "jaraco.context>=6.1.0"
|
||||
|
||||
# Create non-root user
|
||||
RUN addgroup -g 65532 -S flaskpaste && adduser -u 65532 -S -G flaskpaste flaskpaste
|
||||
|
||||
|
||||
Reference in New Issue
Block a user