cs3org / wopiserver

A vendor-neutral application gateway compatible with the WOPI specifications.
Apache License 2.0
52 stars 27 forks source link

Use python-alpine docker base image #88

Closed micbar closed 1 year ago

micbar commented 1 year ago

Description

Debian based python image security scan

❯ trivy image cs3org/wopiserver:latest
2022-09-30T14:04:12.004+0200    INFO    Vulnerability scanning is enabled
2022-09-30T14:04:12.004+0200    INFO    Secret scanning is enabled
2022-09-30T14:04:12.004+0200    INFO    If your scanning is slow, please try '--security-checks vuln' to disable secret scanning
2022-09-30T14:04:12.004+0200    INFO    Please see also https://aquasecurity.github.io/trivy/v0.32/docs/secret/scanning/#recommendation for faster secret detection
2022-09-30T14:07:21.688+0200    INFO    Detected OS: debian
2022-09-30T14:07:21.688+0200    INFO    Detecting Debian vulnerabilities...
2022-09-30T14:07:21.802+0200    INFO    Number of language-specific files: 1
2022-09-30T14:07:21.803+0200    INFO    Detecting python-pkg vulnerabilities...

cs3org/wopiserver:latest (debian 11.5)

Total: 1176 (UNKNOWN: 0, LOW: 600, MEDIUM: 229, HIGH: 329, CRITICAL: 18)

Alpine based python image security scan

trivy image python:3.10-alpine
2022-09-30T14:13:03.344+0200    INFO    Vulnerability scanning is enabled
2022-09-30T14:13:03.344+0200    INFO    Secret scanning is enabled
2022-09-30T14:13:03.344+0200    INFO    If your scanning is slow, please try '--security-checks vuln' to disable secret scanning
2022-09-30T14:13:03.344+0200    INFO    Please see also https://aquasecurity.github.io/trivy/v0.32/docs/secret/scanning/#recommendation for faster secret detection
2022-09-30T14:13:05.031+0200    INFO    Detected OS: alpine
2022-09-30T14:13:05.031+0200    INFO    Detecting Alpine vulnerabilities...
2022-09-30T14:13:05.036+0200    INFO    Number of language-specific files: 1
2022-09-30T14:13:05.036+0200    INFO    Detecting python-pkg vulnerabilities...

python:3.10-alpine (alpine 3.16.2)

Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 1)