InPreD / PRONTO

rePort geneRator fOr iNpred Tumor bOards
GNU General Public License v3.0
0 stars 4 forks source link

Considering switching over to python image with pip instead of the miniconda image #27

Open marrip opened 7 months ago

marrip commented 7 months ago

When scanning the docker image we found several security issues with it due to the base image you are using (63 that are of high concern and 7 critical). These issues might not be so relevant for you as you are running PRONTO in TSD but for us it would be good to minimize any security issues in the images we run. I think moving over to a newer python image would do the trick and dependencies can be easily installed with pip instead of conda. Also, the image size would be a bit smaller :relaxed:

For example python:3.9.18-alpine3.19 if alpine is an option for us which only has 1 high issue or python:3.9.18-slim-bullseye, which also has only 1 high issue but is slightly bigger, if debian is the way to go.