Merge branch '104-fix-security-issues-in-docker-image' into 'main'

Resolve "Fix security issues in docker image"

Closes #104

See merge request pub/terrareg!75

.gitlab-ci.yml

@@ -1,4 +1,4 @@
-image: python:latest
+image: python:3.10
 
 # Change pip's cache directory to be inside the project directory since we can
 # only cache local items.

Dockerfile

@@ -1,9 +1,7 @@
-FROM python:3.8
+FROM python:3.10
 
 WORKDIR /
 
-RUN apt-get update && apt-get dist-upgrade --assume-yes && apt-get clean all
-
 RUN apt-get update && apt-get install --assume-yes curl unzip git && apt-get clean all
 
 RUN wget https://github.com/terraform-docs/terraform-docs/releases/download/v0.16.0/terraform-docs-v0.16.0-linux-amd64.tar.gz && tar -zxvf terraform-docs-v0.16.0-linux-amd64.tar.gz && chmod +x terraform-docs && mv terraform-docs /usr/local/bin/ && rm terraform-docs-v0.16.0-linux-amd64.tar.gz

README.md

@@ -384,6 +384,11 @@ There are common attributes that can be added to each of variable objects, which
 
 ## Changelog
 
+### v1.0.3
+
+ * Update base image to python:10
+ * Remove update of system packages in Dockerfile
+
 ### v1.0.2
 
  * Add exception to be thrown when upload fails to analyse terraform