cnescatlab / cnescatlab/cppcheck
Correction des vulnérabilités - Upgrade image Alpine
- Dominant language
- Dockerfile
- Stars
- 1
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
Bonjour,
Nous avons remarqué pendant l'upgrade de version que le module contenait de nombreuses vulnérabilités (140 détectées par Jfrog Xray).
Ces vulnérabilités proviennent principalement de l'image python alpine de base qui est dépréciée. Il faudrait passer dans une image python plus récente comme la 3.13.X idéalement basée sur alpine.
Merci pour votre compréhension!
---
Hello,
While upgrading the CppCheck module, we noticed that it contained numerous vulnerabilites (140 detected by Jfrog Xray).
Most of those vulnerabilites come from the base python-alpine image which version is deprecated. It would be nice to upgrade this python image to a more recent version such 3.13.X, idealy based on alpine.
Thank you for your understanding!
Contributor guide
Research direction
Inspect the repository's Docker image definition to find the deprecated Python Alpine base image. Check how the image is built, update the base to a recent Python 3.13.x Alpine variant, and verify that the resulting image no longer reports the identified vulnerabilities in JFrog Xray.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- dockerfile, python
- Domain
- devops, infrastructure, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100