From 99f7ec594c7c4b74dcebd6ac232b6de37c6efead Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 25 Dec 2024 07:35:00 +0000 Subject: [PATCH] fix: leaks/example1/deployments/dockerfiles/bandit/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE315-EXPAT-2342164 - https://snyk.io/vuln/SNYK-ALPINE315-EXPAT-2342165 - https://snyk.io/vuln/SNYK-ALPINE315-EXPAT-2393735 - https://snyk.io/vuln/SNYK-ALPINE315-EXPAT-2407738 - https://snyk.io/vuln/SNYK-ALPINE315-EXPAT-2407749 --- leaks/example1/deployments/dockerfiles/bandit/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/leaks/example1/deployments/dockerfiles/bandit/Dockerfile b/leaks/example1/deployments/dockerfiles/bandit/Dockerfile index 15b5940..805b5d5 100644 --- a/leaks/example1/deployments/dockerfiles/bandit/Dockerfile +++ b/leaks/example1/deployments/dockerfiles/bandit/Dockerfile @@ -12,14 +12,14 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM python:3.6-alpine as builder +FROM python:3.14.0a1-alpine as builder # Install and compile bandit + its dependencies RUN apk add --no-cache jq alpine-sdk RUN pip install bandit # Now build a fresh container, copying across the compiled pieces -FROM python:3.6-alpine +FROM python:3.14.0a1-alpine COPY --from=builder /usr/local/lib/python3.6 /usr/local/lib/python3.6 COPY --from=builder /usr/local/bin/bandit /usr/local/bin/bandit