Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove curl dependency from final image #160

Merged
merged 1 commit into from
Sep 13, 2024
Merged

Remove curl dependency from final image #160

merged 1 commit into from
Sep 13, 2024

Conversation

endersonmaia
Copy link
Contributor

This PR will use Dockerfile's ADD instead of curl and not having to install curl in the final image.

With that, we go from 11 CVEs to only 5 according to grype´s output.

NAME            INSTALLED            FIXED-IN  TYPE  VULNERABILITY   SEVERITY   
busybox-static  1:1.36.1-6ubuntu3.1            deb   CVE-2023-42366  Medium      
busybox-static  1:1.36.1-6ubuntu3.1            deb   CVE-2023-39810  Medium      
libgcrypt20     1.10.3-2build1                 deb   CVE-2024-2236   Medium      
libssl3t64      3.0.13-0ubuntu3.4              deb   CVE-2024-41996  Medium      
openssl         3.0.13-0ubuntu3.4              deb   CVE-2024-41996  Medium

@vercel Vercel
Copy link

vercel bot commented Sep 13, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
bug-buster ✅ Ready (Inspect) Visit Preview 💬 Add feedback Sep 13, 2024 6:01pm

@endersonmaia endersonmaia merged commit a0f62f3 into next Sep 13, 2024
4 checks passed
@endersonmaia endersonmaia deleted the feature/remove-curl-from-final-stage branch September 13, 2024 18:22
@endersonmaia endersonmaia self-assigned this Sep 13, 2024
guidanoli pushed a commit that referenced this pull request Sep 18, 2024
@endersonmaia @guidanoli
feat: remove curl dependency from final image (#160)
0cb34b4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@guidanoli guidanoli guidanoli approved these changes

Assignees

@endersonmaia endersonmaia

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@endersonmaia @guidanoli