containerfile: pin wheel>=0.46.2 in runtime stage
All checks were successful
CI / Security Scan (push) Successful in 34s
CI / Lint & Format (push) Successful in 38s
CI / Security Tests (push) Successful in 42s
CI / Unit Tests (push) Successful in 1m5s
CI / Advanced Security Tests (push) Successful in 28s
CI / Memory Leak Check (push) Successful in 29s
CI / Fuzz Testing (push) Successful in 40s
CI / SBOM Generation (push) Successful in 29s
CI / Build & Push Image (push) Successful in 37s
CI / Harbor Vulnerability Scan (push) Successful in 37s
All checks were successful
CI / Security Scan (push) Successful in 34s
CI / Lint & Format (push) Successful in 38s
CI / Security Tests (push) Successful in 42s
CI / Unit Tests (push) Successful in 1m5s
CI / Advanced Security Tests (push) Successful in 28s
CI / Memory Leak Check (push) Successful in 29s
CI / Fuzz Testing (push) Successful in 40s
CI / SBOM Generation (push) Successful in 29s
CI / Build & Push Image (push) Successful in 37s
CI / Harbor Vulnerability Scan (push) Successful in 37s
This commit is contained in:
@@ -29,7 +29,7 @@ LABEL maintainer="FlaskPaste"
|
|||||||
LABEL description="Minimal secure pastebin REST API"
|
LABEL description="Minimal secure pastebin REST API"
|
||||||
|
|
||||||
# Apply security fixes to base image, remove vendored vulnerable packages
|
# Apply security fixes to base image, remove vendored vulnerable packages
|
||||||
RUN pip install --no-cache-dir --upgrade pip 'setuptools>=80.0' 'jaraco.context>=6.1.0' \
|
RUN pip install --no-cache-dir --upgrade pip 'wheel>=0.46.2' 'setuptools>=80.0' 'jaraco.context>=6.1.0' \
|
||||||
&& pip cache purge 2>/dev/null || true \
|
&& pip cache purge 2>/dev/null || true \
|
||||||
&& rm -rf /root/.cache /usr/local/lib/python*/site-packages/setuptools/_vendor/jaraco*
|
&& rm -rf /root/.cache /usr/local/lib/python*/site-packages/setuptools/_vendor/jaraco*
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user