Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[ACS Report] Skip Recommendations during packaging #4976

Open
sumathi-thirumani opened this issue Jan 5, 2024 · 1 comment
Open

[ACS Report] Skip Recommendations during packaging #4976

sumathi-thirumani opened this issue Jan 5, 2024 · 1 comment
Labels
high priority security

Comments

@sumathi-thirumani
Copy link
Contributor

sumathi-thirumani commented Jan 5, 2024 •
edited
Loading

w.r.t security scanning findings; it is not advised to install the default recommendations during packaging

Please change the below line which automatically installs recommendations
image.png

to
"RUN
apt-get update && apt-get install -y --no-install-recommends "

image.png

Reference:
https://acs.developer.gov.bc.ca/main/vulnerabilities/workload-cves/images/sha256:0f74dd85764ce26f2a603e6927c99c1b810eb661f35c3cd392a724ceec9f5c74?detailsTab=Vulnerabilities&sortOption[field]=Severity&sortOption[direction]=desc
CVE-2022-1586
@sumathi-thirumani sumathi-thirumani changed the title [ACS Report] [ACS Report] Skip Recommendations during packaging Jan 5, 2024
@sumathi-thirumani
Copy link
Contributor Author

Internal Technical Refinement (4976):

Estimate: 3

  • Dockerfile changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
high priority security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@sumathi-thirumani