containerfile: pin pip>=25.3 to fix CVE-2025-8869
All checks were successful
CI / Lint & Format (push) Successful in 21s
CI / Security Scan (push) Successful in 19s
CI / Advanced Security Tests (push) Successful in 15s
CI / Memory Leak Check (push) Successful in 19s
CI / Security Tests (push) Successful in 25s
CI / Unit Tests (push) Successful in 33s
CI / Fuzz Testing (push) Successful in 25s
CI / SBOM Generation (push) Successful in 19s
CI / Build & Push Image (push) Successful in 29s
CI / Harbor Vulnerability Scan (push) Successful in 34s

This commit is contained in:
Username
2026-01-20 08:12:22 +01:00
parent 9c4c907f75
commit e4b313041e

View File

@@ -16,7 +16,7 @@ RUN apk add --no-cache gcc musl-dev libffi-dev
# Create virtual environment and upgrade pip
RUN python -m venv /opt/venv
ENV PATH="/opt/venv/bin:$PATH"
RUN pip install --no-cache-dir --upgrade pip wheel
RUN pip install --no-cache-dir --upgrade "pip>=25.3" wheel
# Install Python dependencies
COPY requirements.txt .