Skip to content

Draft: Fix image vulnerabilities #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
christophdb merged 5 commits into from
May 12, 2025
Merged

Draft: Fix image vulnerabilities #72

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
640d055
Upgrade setuptools to fix vulnerabilities
simonhammes Sep 11, 2024
1796c1a
CI: Run trivy against local images
simonhammes Sep 11, 2024
de0888c
Add --user to pip commands
simonhammes Sep 11, 2024
c4dc236
Doppelt hält besser
simonhammes Sep 11, 2024
00efaef
Merge branch 'main' into fix-image-vulnerabilities
christophdb May 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion runner/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,10 @@ WORKDIR /settings

COPY ./requirements.txt .

RUN pip install -r requirements.txt --no-cache-dir --user
# Upgrade setuptools to fix vulnerabilities
RUN pip install --upgrade setuptools && \
pip install --upgrade --user setuptools && \
pip install -r requirements.txt --no-cache-dir --user


## Runtime image
Expand Down
6 changes: 5 additions & 1 deletion scheduler/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,11 @@ COPY ["version", "/opt/scheduler/version"]
COPY ["logrotate/", "/opt/scheduler/logrotate/"]
RUN mkdir -p /opt/scheduler/logs
RUN mkdir -p /opt/seatable/logs
RUN pip3 install -r /opt/scheduler/requirements.txt --user

# Upgrade setuptools to fix vulnerabilities
RUN pip3 install --upgrade setuptools && \
pip3 install --upgrade --user setuptools && \
pip3 install -r /opt/scheduler/requirements.txt --user

# Add Tini
ENV TINI_VERSION v0.19.0
Expand Down
5 changes: 4 additions & 1 deletion starter/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,11 @@ RUN apt-get update --fix-missing && \

WORKDIR /opt/seatable-python-starter
COPY ["./requirements.txt", "/opt/seatable-python-starter/"]
RUN pip install -r /opt/seatable-python-starter/requirements.txt --user --break-system-packages

# Upgrade setuptools to fix vulnerabilities
RUN pip install --upgrade setuptools && \
pip install --upgrade --user setuptools && \
pip install -r /opt/seatable-python-starter/requirements.txt --user --break-system-packages

### Runtime image
FROM python:3.11-slim-bookworm AS runtime-image
Expand Down