Closed montaguethomas closed 2 months ago
The version of the alpine base image used is EOL. Bump to most recent stable version 3.19 (yes, 3.20 was just released today).
Even with the latest alpine 3.19.1 image, it has missing package updates. Add to Dockerfiles to ensure latest updates are installed at build time.
Added support for alternative container engines to the makefile (e.g. podman).
/lgtm
drivebyer
commented
2 months ago drivebyer
commented
2 months ago
The version of the alpine base image used is EOL. Bump to most recent stable version 3.19 (yes, 3.20 was just released today).
Even with the latest alpine 3.19.1 image, it has missing package updates. Add to Dockerfiles to ensure latest updates are installed at build time.
Added support for alternative container engines to the makefile (e.g. podman).
Trivy Scan Results
Before - alpine 3.15
After - alpine 3.19
Final - alpine 3.19 + apk upgrade