Skip to content

Commit

Permalink
fix vulns (#69)
Browse files Browse the repository at this point in the history
* fix vulns, revert git-lfs, set strict git-lfs version
  • Loading branch information
pysarenko-bohdan authored Oct 23, 2023
1 parent 3d73606 commit 5a5156b
Show file tree
Hide file tree
Showing 2 changed files with 8 additions and 16 deletions.
22 changes: 7 additions & 15 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,23 +1,15 @@
#moving to ubuntu instead of debian to solve high vulnerabilities
FROM ubuntu:jammy-20230816
#moving to ubuntu instead of debian to solve high vulnerabilities
FROM ubuntu:jammy-20231004

RUN apt-get update && \
apt-get install -y curl bash openssl git && \
apt-get clean

ARG GIT_LFS_VERSION=3.4.0
ARG TARGETPLATFORM

# installing git-lfs
RUN case ${TARGETPLATFORM} in \
"linux/amd64") OS_ARCH=amd64 ;; \
"linux/arm64") OS_ARCH=arm64 ;; \
esac \
&& curl -sL https://github.com/git-lfs/git-lfs/releases/download/v${GIT_LFS_VERSION}/git-lfs-linux-${OS_ARCH}-v${GIT_LFS_VERSION}.tar.gz -o "git-lfs.tar.gz" && \
tar -xvzf "git-lfs.tar.gz" && \
chmod +x git-lfs-${GIT_LFS_VERSION}/install.sh && \
rm git-lfs.tar.gz && \
git-lfs-${GIT_LFS_VERSION}/install.sh
# git-lfs v3.4.0 - last available at the 23.10.2023 and it contains bug. Don't update to the version 3.4.0 !!!
# https://codefresh-io.atlassian.net/browse/CR-20633
# Next preferred version must be >=3.4.1 and should be tested
RUN apt-get install git-lfs=3.0.2-1 && \
git lfs install

#installing busybox
ARG BUSYBOX_VERSION=1.31.0
Expand Down
2 changes: 1 addition & 1 deletion service.yaml
Original file line number Diff line number Diff line change
@@ -1 +1 @@
version: 10.1.23
version: 10.1.24

0 comments on commit 5a5156b

Please sign in to comment.