apolloconfig / apollo

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.
https://www.apolloconfig.com
Apache License 2.0
29.2k stars 10.21k forks source link

dockerfile基础镜像漏洞 #5144

Closed ltx0633 closed 4 months ago

ltx0633 commented 6 months ago

你的特性请求和某个问题有关吗?请描述

在安全合规时发现镜像存在漏洞,是否适用其他版本的jre?

清晰简洁地描述一下你希望的解决方案

更新基础镜像

清晰简洁地描述一下这个特性的备选方案

其它背景

image

shoothzj commented 6 months ago

I think we can update this, using jdk17 even jdk21, would you like send a PR? thanks.

nobodyiam commented 6 months ago

eclipse-temurin:17-jre appears to be a strong alternative.

ltx0633 commented 6 months ago
截屏2024-05-22 21 35 20

According to the product image of PR. Whether to consider upgrading components (postgres, log4j), etc.

In addition, I have verified that eclipse-temurin:17-jre images are feasible in a production environment

eclipse-temurin:17-jre appears to be a strong alternative.

nobodyiam commented 6 months ago

Whether to consider upgrading components (postgres, log4j), etc.

PRs are welcome to upgrade these dependencies.

stale[bot] commented 5 months ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.

stale[bot] commented 4 months ago

This issue has been automatically closed because it has not had activity in the last 7 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.