[Vulnerabilities] Update Dockerfile Alpine Image from alpine:3.12 => alpine:3.18

wagoodman / dive

A tool for exploring each layer in a docker image

MIT License

46.64k stars 1.77k forks source link

[Vulnerabilities] Update Dockerfile Alpine Image from alpine:3.12 => alpine:3.18 #481

Closed Nathan-Moignard closed 9 months ago

Nathan-Moignard commented 1 year ago

Hi, I am proposing an upgrade of the alpine image to patch discovered vulnerabilities. Trivy Report showing vunlarability:

WARN This OS version is no longer supported by the distribution: alpine 3.12.12 │ zlib │ CVE-2022-37434 │ CRITICAL │ fixed │ 1.2.12-r0 │ 1.2.12-r2 | https://avd.aquasec.com/nvd/cve-2022-37434