The purpose of this Docker image is to provide the ability to run the UiPath Command Line Interface (UiPath CLI). (The base image is the latest version of dotnet 6 SDK - the only version of dotnet that UiPath has tested against at this time.)
See the following UiPath documentation links for more information on the CLI usage:
To get more help on the available verbs (actions) and the CLI version, use the following command:
docker run bp3global/uipcli /uipcli.sh [help]To get help on a specific verb (action), for example, running test sets, use the following command:
docker run bp3global/uipcli /uipcli.sh testTo use within a GitLab pipeline build, as an example, use the following command:
image: bp3global/uipcli
script: /uipcli.sh test...The vulnerability scan automatically performed by DockerHub when this image is built does report a number of vulnerabilities. Further investigation reveals that these vulnerabilities exist in (are introduced by) the underlying .NET SDK v6 image from Microsoft. As such BP3 takes no responsibility for the fact that these vulnerabilities exist in this image. If you are not happy with these vulnerabilities then your choices are
- Report your concerns to Microsoft as the producer of the upstream image
- Produce your own image
With that said you may also wish to consider what risk these vulnerabilities actually present. There is a big difference using this image for a server on the public internet versus its intended use to execute a single command as part of a GitLab pipeline. You may feel that you can accept the risk.