Adopt ubuntu base for docker images - Githubissues

authgear / authgear-server

Open source alternative to Auth0 / Firebase Auth

https://www.authgear.com

Apache License 2.0

72 stars 29 forks source link

Adopt ubuntu base for docker images #4352

Closed elise-ng closed 1 week ago

elise-ng commented 1 week ago

Ref DEV-1379

[x] Fork official golang dockerfile to use ubuntu as base: see https://github.com/elise-ng/golang-docker
[x] Move fork to under authgear org
[x] Move golang image to under authgear container repo
[x] Migrate dockerfiles to build with ubuntu base
[x] Check if audit report improves

quay.io report:

Base image (golang on noble): 31 mid, 37 low; https://quay.io/repository/elise-oursky/golang/manifest/sha256:2e97d55dc96a0bdd6031ca1e1f147cff9d33f69ff31706f3163bc8019ec9d841?tab=vulnerabilities

Authgear Server: 582 medium, 94 low; https://quay.io/repository/elise-oursky/authgear-server/manifest/sha256:c61f6437b88b1e251b6aab8347e05605ed3d493f3a5721126e26a611699052c6?tab=vulnerabilities

Authgear portal: same as above; https://quay.io/repository/elise-oursky/authgear-portal/manifest/sha256:ef218e503b7486096bbb855511b2318937c859e2ee433914f1e573d6380eab22?tab=vulnerabilities