search

opendevstack / ods-quickstarters

Contains project quickstarters (boilerplates) for Nginx, Go, Java (Spring Boot), Python (Flask), Rust (Axum), Scala (Play), TypeScript (Express), Angular, Ionic, Jupyter, RShiny - all including CI/CD integration & Jenkins build agents
Apache License 2.0
29 stars 41 forks source link

OS packages updated by default in the Quickstarters #1049

Closed BraisVQ closed 2 months ago

BraisVQ commented 2 months ago

Is your feature request related to a problem? Please describe. Currently, when a Quickstarter gets provisioned, it comes with the base image, the specific language/tool for it and the example app. No other package is installed or updated and this could lead to some vuls reaching the end users

Describe the solution you'd like OS packages should be updated when the quickstarter gets provisioned for the 1º time by adding, for example, "yum update -y" on the dockerfile

Describe alternatives you've considered N/A

Additional context For the images that do not come with a package manager left them as they are

BraisVQ commented 2 months ago

Additionally we should also update gitleaks version