From f2a21a77fbc742d4b4ebe1600db055ec34b4d30d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Mon, 10 Feb 2025 20:34:39 +0000 Subject: [PATCH] fix: task/github-app-token/0.1/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE320-EXPAT-8359601 - https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-8235201 - https://snyk.io/vuln/SNYK-ALPINE320-OPENSSL-8235201 --- task/github-app-token/0.1/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/task/github-app-token/0.1/Dockerfile b/task/github-app-token/0.1/Dockerfile index 7bf992043c..f7fd1ec3ba 100644 --- a/task/github-app-token/0.1/Dockerfile +++ b/task/github-app-token/0.1/Dockerfile @@ -1,9 +1,9 @@ -FROM python:3.8-alpine as build +FROM python:3.13.2-alpine as build RUN apk update && apk upgrade && pip install -U pip && \ apk add --update alpine-sdk make gcc python3-dev libffi-dev openssl-dev \ && rm -rf /var/cache/apk/* RUN pip --no-cache-dir install requests jwcrypto -FROM python:3.8-alpine +FROM python:3.13.2-alpine COPY --from=build /usr/local/share /usr/local/share COPY --from=build /usr/local/lib /usr/local/lib