Added fix for Trivy scan on pip

simao-silva · Nov 4, 2023 · d074846 · d074846
1 parent 1d5e928
commit d074846
Showing 1 changed file with 3 additions and 6 deletions.
diff --git a/Dockerfile.debian b/Dockerfile.debian
@@ -65,12 +65,9 @@ RUN apt-get update && \
     apt-get clean && \
     rm -rf /tmp/* /var/lib/apt/lists/* /var/tmp/* /usr/share/doc /usr/share/man
 
-# Fix for vulnerabilities reported by Trivy
-RUN apt-get update && \
-    apt-get upgrade -y libc-bin libc6 && \
-    apt-get autoremove -y && \
-    apt-get clean && \
-    rm -rf /tmp/* /var/lib/apt/lists/* /var/tmp/* /usr/share/doc /usr/share/man
+# Fix vulnerabilities reported by Trivy
+ARG PIP_VERSION
+RUN /usr/local/bin/pip install --upgrade pip=="${PIP_VERSION}"
 
 # Enable custom virtual environment
 ENV VIRTUAL_ENV=/opt/venv