search

awslabs / cdk-serverless-clamscan

Apache License 2.0
237 stars 67 forks source link

fix: pin lambda/python image to avoid breaking changes #1047

Closed lirwin3007 closed 10 months ago

lirwin3007 commented 10 months ago

As per the comments in #1046 and #1045, AWS has introduced breaking changes to the public.ecr.aws/lambda/python:3.11 image. This PR pins the image to a known-good image.

An ideal solution would be to update the use of yum to dnf, in line with AWS's suggestion, but even this has issues on the latest 3.11 image (see https://github.com/awslabs/cdk-serverless-clamscan/issues/1046#issuecomment-1842675868)

Fixes #1046

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

dontirun commented 10 months ago

Thanks for the PR and running down the issue. We should explore moving the newer images after the issue is resolved so that we don't eventually end up with an outdated clamav version of the Amazon Linux 2 repo yum repos aren't going to be maintained