Skip to content

Conversation

@chris-vest
Copy link

What this PR does / why we need it:

There are a number of vulnerabilities in the current image v1.0.0, this PR should fix that permanently going forwards by using a scratch base which only includes the static binary of the application, user info and CAs.

Release note:

1. Update Dockerfile to use `scratch` base to avoid having vulnerabilities in the root filesystem.

@lichuan0620
Copy link
Contributor

lichuan0620 commented Sep 23, 2021

I should look into running executables built within glibc based environments in alpine environment (musl libc). Unfortunately, we are not actively maintaining the repo anymore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants