From b4f54d799bde57ec7abafdd1566a470486fc7cc5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 29 Jan 2025 23:32:46 +0000 Subject: [PATCH] fix: task/github-app-token/0.1/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE320-EXPAT-8359601 - https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-8235201 - https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-8235201 --- task/github-app-token/0.1/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/task/github-app-token/0.1/Dockerfile b/task/github-app-token/0.1/Dockerfile index 7bf992043c..ff1b10caa4 100644 --- a/task/github-app-token/0.1/Dockerfile +++ b/task/github-app-token/0.1/Dockerfile @@ -1,9 +1,9 @@ -FROM python:3.8-alpine as build +FROM python:3.14.0a4-alpine as build RUN apk update && apk upgrade && pip install -U pip && \ apk add --update alpine-sdk make gcc python3-dev libffi-dev openssl-dev \ && rm -rf /var/cache/apk/* RUN pip --no-cache-dir install requests jwcrypto -FROM python:3.8-alpine +FROM python:3.14.0a4-alpine COPY --from=build /usr/local/share /usr/local/share COPY --from=build /usr/local/lib /usr/local/lib