The Dockerfile present for tag v0.2.14 (the release version) does use the alpine package manager to upgrade system dependencies.
These kind of upgrades alter the base container image in a way, that we cannot rely on the published container scans provided by DockerHub.
Therefore package manager updates/upgrades must not be present in our Dockerfiles
See the upgraded TRG 4.02 descriptions for a more detailed explanation
The
Dockerfile
present for tagv0.2.14
(the release version) does use the alpine package manager to upgrade system dependencies. These kind of upgrades alter the base container image in a way, that we cannot rely on the published container scans provided by DockerHub. Therefore package manager updates/upgrades must not be present in ourDockerfile
sSee the upgraded TRG 4.02 descriptions for a more detailed explanation