Fix Docker image vulnerabilities

CDCgov / prime-simplereport

SimpleReport is a fast, free, and easy way for COVID-19 testing facilities to report results to public health departments.

https://simplereport.gov

Creative Commons Zero v1.0 Universal

58 stars 53 forks source link

Closed jdorothy closed 3 years ago

jdorothy commented 3 years ago

Snyk currently detects 62 vulnerabilities in our Docker image. We should fix this!

Many of the issues seem to stem from the underlying JDK image being used - we should update that image.
You can use the Snyk CLI to scan the image locally for faster feedback - fixing all vulnerabilities will be an iterative process.

timbest-cdc commented 3 years ago