search

pyupio / safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
https://safetycli.com/product/safety-cli
MIT License
1.7k stars 143 forks source link

Update docker file to use the latest python image #359

Closed Meallia closed 2 months ago

Meallia commented 2 years ago

cf #304 Use the 3-slim rolling tag instead of using a fixed python version.

codecov[bot] commented 2 years ago

Codecov Report

Merging #359 (5175184) into master (7d1448e) will not change coverage. The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #359   +/-   ##
=======================================
  Coverage   69.51%   69.51%           
=======================================
  Files           8        8           
  Lines         538      538           
=======================================
  Hits          374      374           
  Misses        164      164

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 7d1448e...5175184. Read the comment docs.

dylanpulver commented 2 months ago

Hi @Meallia,

Thank you for your pull request and for your effort to update the Dockerfile.

After careful consideration, we've decided to move this pull request to the "wontfix" category. We wanted to provide some context for our decision:

Security Concerns: Using the latest Python image without specifying a version can introduce security risks. It may include untested or unstable changes that could impact the stability and security of our application.

Version Specificity: We prefer to specify the exact Python version to ensure consistency and maintain control over the environment. This helps us manage dependencies and security patches more effectively.

We appreciate your understanding and thank you for your contribution. If you have any further suggestions or would like to discuss alternative approaches, we would love to hear from you.

Best regards,

The Safety Team