[Snyk] Security upgrade nginx from stable-alpine to 1.27.2-alpine3.20 #109
Annotations
6 warnings and 1 notice
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile#L27
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile#L27
Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile#L75
Use WORKDIR to switch to a directory
|
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile#L75
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile.ghcr#L24
Use WORKDIR to switch to a directory
|
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile.ghcr#L24
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
Linting Dockerfiles and annotate code inline in the github PR viewer:
ckan/Dockerfile#L27
Avoid additional packages by specifying `--no-install-recommends`
|
Loading