search

confluentinc / schema-registry-images

Docker Images for Schema Registry
Apache License 2.0
2 stars 21 forks source link

Remove Python Libraries #43

Closed skhraashid closed 2 years ago

skhraashid commented 2 years ago

Hi, Is there any way we can remove python depency from this docker image, I am only using Java, and the install python libraries has many critical security vulanerablities.

Thanks.

andrewegel commented 2 years ago

Is there any way we can remove python depency from this docker image

Not without breaking other users that use this functionality of passing environment variables and translating them into Java config properties files. So your really only option is to build your own image with the software that you need.

This aspect may be revisited at future point in time to use things like docker config and docker secret features, but there's nothing on the roadmap around this.

python libraries has many critical security vulanerablities.

We scan our latest docker image releases for vulnerabilities and address them in quarterly release. Provided that you're using the latest images for your major version line these vulnerabilities should be addressed.