cnescatlab / cnescatlab/cppcheck

Correction des vulnérabilités - Upgrade image Alpine

Open
#4 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Dockerfile
Stars
1
Forks
3
PR merge metrics
No merged PRs in 30d

Description

Bonjour,

Nous avons remarqué pendant l'upgrade de version que le module contenait de nombreuses vulnérabilités (140 détectées par Jfrog Xray).
Ces vulnérabilités proviennent principalement de l'image python alpine de base qui est dépréciée. Il faudrait passer dans une image python plus récente comme la 3.13.X idéalement basée sur alpine.

Merci pour votre compréhension!

---

Hello,

While upgrading the CppCheck module, we noticed that it contained numerous vulnerabilites (140 detected by Jfrog Xray).
Most of those vulnerabilites come from the base python-alpine image which version is deprecated. It would be nice to upgrade this python image to a more recent version such 3.13.X, idealy based on alpine.

Thank you for your understanding!

Contributor guide

Open the contributing guide

Research direction

Inspect the repository's Docker image definition to find the deprecated Python Alpine base image. Check how the image is built, update the base to a recent Python 3.13.x Alpine variant, and verify that the resulting image no longer reports the identified vulnerabilities in JFrog Xray.

Written by the indexing model from the issue text.

Assessment

Tech stack
dockerfile, python
Domain
devops, infrastructure, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.