revoltchat / backend

Monorepo for Revolt backend services.
https://developers.revolt.chat/api/
Other
1.09k stars 123 forks source link

replace runtime image to distrolles run as noroot #297

Open MaticPoh opened 7 months ago

MaticPoh commented 7 months ago

I've implemented distrolles to remove CVEs from libraries not used in the project, you never know when they might haunt you hahaha

https://github.com/revoltchat/backend/issues/298

https://github.com/revoltchat/backend/security/advisories/GHSA-m2p9-rmqf-455p

Please make sure to check the following tasks before opening and submitting a PR

github-actions[bot] commented 7 months ago

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

Rexogamer commented 3 months ago

Just realised that this is held on the CLA being signed - once done, we should be able to review this

MaticPoh commented 2 months ago

I have read the CLA Document and I hereby sign the CLA

Rexogamer commented 3 weeks ago

(the CLA has since been removed; ready for review in any case)