Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci(deps): bump chainguard/git from f8fd9ab to f20defb #7015

Merged
merged 3 commits into from
Apr 19, 2024
Merged

ci(deps): bump chainguard/git from f8fd9ab to f20defb #7015

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7ba577c
ci(deps): bump chainguard/git from `f8fd9ab` to `f20defb`
dependabot[bot] Apr 18, 2024
4a9bf3c
Merge branch 'master' into dependabot/docker/chainguard/git-f20defbb7…
gabriel-cx Apr 19, 2024
6d8849d
Merge branch 'master' into dependabot/docker/chainguard/git-f20defbb7…
gabriel-cx Apr 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM cgr.dev/chainguard/go@sha256:a06a462f22445088e8bbb4478dedf83228af0db9003cd4f4cde5981694bc3d3d as build_env

Check warning on line 1 in Dockerfile

View workflow job for this annotation

GitHub Actions / kics-scan

[LOW] Using Platform Flag with FROM Command 

Don't use '--platform' flag with FROM

# Copy the source from the current directory to the Working Directory inside the container
WORKDIR /app
Expand Down Expand Up @@ -31,11 +31,11 @@
# Runtime image
# Ignore no User Cmd since KICS container is stopped afer scan
# kics-scan ignore-line
FROM cgr.dev/chainguard/git@sha256:f8fd9abd68239716cb7c83e69bb07f53613e595e9c6eb05c059de9759878880a
FROM cgr.dev/chainguard/git@sha256:f20defbb71126cae9e76cb95d24399df877b4fe62476525c0e67b05c0206b51d

ENV TERM xterm-256color

USER root

Check warning on line 38 in Dockerfile

View workflow job for this annotation

GitHub Actions / kics-scan

[HIGH] Last User Is 'root' 

Leaving the last user as root can cause security risks. Change to another user after running the commands the need privileges

# Copy built binary to the runtime container
# Vulnerability fixed in latest version of KICS remove when gh actions version is updated
Expand Down
Loading