From a4978a6db60da60573d4d86a1852bcb1c1ce8dc1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 27 Oct 2022 20:59:26 +0000 Subject: [PATCH 1/2] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE316-EXPAT-3062883 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 23c96b6..59e1ce6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # vim:set ft=dockerfile: -FROM python:3.7-alpine +FROM python:3.12.0a1-alpine LABEL Description="Twitcher" Vendor="Birdhouse" Maintainer="https://github.com/bird-house/twitcher" # Configure hostname and ports for services From dc91ab6555f816cf67cc85edf07dea9d9c41c905 Mon Sep 17 00:00:00 2001 From: Francis Charette-Migneault Date: Fri, 28 Oct 2022 15:12:55 -0400 Subject: [PATCH 2/2] Update Dockerfile Revert Dockerfile Python 3.7 for now, but use more recent Alpine 3.16 tag. Relates to https://security.snyk.io/vuln/SNYK-ALPINE316-EXPAT-3062883 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 59e1ce6..3a83e13 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # vim:set ft=dockerfile: -FROM python:3.12.0a1-alpine +FROM python:3.7-alpine3.16 LABEL Description="Twitcher" Vendor="Birdhouse" Maintainer="https://github.com/bird-house/twitcher" # Configure hostname and ports for services