Update alpine to 3.18

[orgads]

No description provided.

[orgads]

@ashie ping

[orgads]

Alpine 3.17 is vulnerable to CVE-2022-48174.

[ashie]

CVE-2022-48174 is for less than busybox 1.35 while Alpine 3.17 uses busybox 1.35.
So it's false positive.

Please see also #362 (comment)

[orgads]

CVE-2022-48174 is for less than busybox 1.35 while Alpine 3.17 uses busybox 1.35. So it's false positive.

Please see also #362 (comment)

Alpine 3.17 has busybox 1.29. See #362 (comment)

And even if it has been fixed in 3.17 - do you have a good reason not to upgrade to 3.18?

[ashie]

Alpine 3.17 has busybox 1.29. See #362 (comment)

Please see the comment carefully, it's 1.35-r29, not 1.29.

And even if it has been fixed in 3.17 - do you have a good reason not to upgrade to 3.18?

Please see the just above comment in the issue: #362 (comment)

[orgads]

Sorry, you're right. JFrog X-Ray scanner got me confused.