apolloconfig / apollo

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.
https://www.apolloconfig.com
Apache License 2.0
28.93k stars 10.19k forks source link

dockerfile基础镜像漏洞 #5144

Open ltx0633 opened 1 month ago

ltx0633 commented 1 month ago

你的特性请求和某个问题有关吗?请描述

在安全合规时发现镜像存在漏洞,是否适用其他版本的jre?

清晰简洁地描述一下你希望的解决方案

更新基础镜像

清晰简洁地描述一下这个特性的备选方案

其它背景

image

shoothzj commented 1 month ago

I think we can update this, using jdk17 even jdk21, would you like send a PR? thanks.

nobodyiam commented 1 month ago

eclipse-temurin:17-jre appears to be a strong alternative.

ltx0633 commented 1 month ago
截屏2024-05-22 21 35 20

According to the product image of PR. Whether to consider upgrading components (postgres, log4j), etc.

In addition, I have verified that eclipse-temurin:17-jre images are feasible in a production environment

eclipse-temurin:17-jre appears to be a strong alternative.

nobodyiam commented 1 month ago

Whether to consider upgrading components (postgres, log4j), etc.

PRs are welcome to upgrade these dependencies.

stale[bot] commented 5 days ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.