Skip to content
This repository was archived by the owner on May 13, 2026. It is now read-only.
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# hadolint global ignore=DL3008
FROM ghcr.io/astral-sh/uv:0.9.8@sha256:08f409e1d53e77dfb5b65c788491f8ca70fe1d2d459f41c89afa2fcbef998abe AS uv
FROM ghcr.io/astral-sh/uv:0.9.9@sha256:f6e3549ed287fee0ddde2460a2a74a2d74366f84b04aaa34c1f19fec40da8652 AS uv

##
# base
Expand Down Expand Up @@ -33,7 +33,7 @@
APT::AutoRemove::SuggestsImportant "false";
EOF

RUN apt-get update && \

Check warning on line 36 in Dockerfile

View workflow job for this annotation

GitHub Actions / kics

[MEDIUM] Apt Get Install Pin Version Not Defined

When installing a package, its pin version should be defined
apt-get upgrade --yes && \
apt-get install --yes --no-install-recommends curl \
&& rm -rf /var/lib/apt/lists/*
Expand All @@ -43,7 +43,7 @@
##
FROM base AS dev

RUN apt-get update && \

Check warning on line 46 in Dockerfile

View workflow job for this annotation

GitHub Actions / kics

[MEDIUM] Apt Get Install Pin Version Not Defined

When installing a package, its pin version should be defined
apt-get install --yes --no-install-recommends build-essential \
&& rm -rf /var/lib/apt/lists/*

Expand Down Expand Up @@ -91,7 +91,7 @@
FROM dev AS compile

USER root
RUN apt-get update && \

Check warning on line 94 in Dockerfile

View workflow job for this annotation

GitHub Actions / kics

[MEDIUM] Apt Get Install Pin Version Not Defined

When installing a package, its pin version should be defined

Check warning on line 94 in Dockerfile

View workflow job for this annotation

GitHub Actions / kics

[MEDIUM] Apt Get Install Pin Version Not Defined

When installing a package, its pin version should be defined
apt-get install --yes --no-install-recommends \
binutils \
patchelf \
Expand Down