Dockerfile: only install git in test

This avoids CVE-2018-1000021.
opendatacube · Apr 7, 2024 · a955292 · a955292
1 parent 7b72e95
commit a955292
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -31,13 +31,15 @@ ENV DEBIAN_FRONTEND=noninteractive \
 RUN apt-get update && \
     apt-get upgrade -y && \
     apt-get install -y --no-install-recommends \
-      git \
       # For Psycopg2
       libpq5 \
       tini \
       postgresql-client \
       python3-pip \
-    && apt-get autoclean && \
+    && ([ "$ENVIRONMENT" = "deployment" ] || \
+         apt-get install -y --no-install-recommends \
+           git) && \
+    apt-get autoclean && \
     apt-get autoremove && \
     rm -rf /var/lib/{apt,dpkg,cache,log}