Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: reduce python surface and image size #1348

Merged
merged 7 commits into from
Sep 8, 2023
Merged

feat: reduce python surface and image size #1348

merged 7 commits into from
Sep 8, 2023

Conversation

DerekRoberts
Copy link
Member

@DerekRoberts DerekRoberts commented Sep 8, 2023 •
edited
Loading

Change Python base to Debian Slim as suggested in Snyk vulnerability warnings. It has a much smaller attack surface vs Debian full, although that is still used for the initial portion of multistage builds.

Image size reduced from 1.2 GB to 212 MB.

 following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN12-LIBRSVG-5802975
- https://snyk.io/vuln/SNYK-DEBIAN12-LIBRSVG-5802975
- https://snyk.io/vuln/SNYK-DEBIAN12-LIBRSVG-5802975
- https://snyk.io/vuln/SNYK-DEBIAN12-LIBRSVG-5802975
- https://snyk.io/vuln/SNYK-DEBIAN12-OPENSSH-1556053

Thanks for the PR!

Any successful deployments (not always required) will be available below.
Backend available
Frontend available

Once merged, code will be promoted and handed off to following workflow run.
Main Merge Workflow

@DerekRoberts DerekRoberts added enhancement New feature or request dependencies Pull requests that update a dependency file labels Sep 8, 2023
@DerekRoberts DerekRoberts self-assigned this Sep 8, 2023
github-advanced-security[bot]
github-advanced-security bot found potential problems Sep 8, 2023
View reviewed changes
backend-python/Dockerfile Fixed Show fixed Hide fixed
@DerekRoberts DerekRoberts linked an issue Sep 8, 2023 that may be closed by this pull request
feat: snyk python image vulnerabilities #1337
Closed
@DerekRoberts DerekRoberts changed the title Deps/python base feat: reduce python surface and image size Sep 8, 2023
@DerekRoberts DerekRoberts merged commit 3c07ec9 into main Sep 8, 2023
@DerekRoberts DerekRoberts deleted the deps/pythonBase branch September 8, 2023 13:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mishraomp mishraomp Awaiting requested review from mishraomp

Assignees

@DerekRoberts DerekRoberts

Labels
dependencies Pull requests that update a dependency file enhancement New feature or request
Projects
DevOps (NR)
Archived in project
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

feat: snyk python image vulnerabilities
1 participant
@DerekRoberts