[Vulnerabilities] Update Dockerfile Alpine Image from alpine:3.12 => alpine:3.18

wagoodman / dive

A tool for exploring each layer in a docker image

MIT License

44.55k stars 1.69k forks source link

[Vulnerabilities] Update Dockerfile Alpine Image from alpine:3.12 => alpine:3.18 #481

Closed Nathan-Moignard closed 5 months ago

Nathan-Moignard commented 8 months ago

Hi, I am proposing an upgrade of the alpine image to patch discovered vulnerabilities. Trivy Report showing vunlarability:

WARN This OS version is no longer supported by the distribution: alpine 3.12.12 │ zlib │ CVE-2022-37434 │ CRITICAL │ fixed │ 1.2.12-r0 │ 1.2.12-r2 | https://avd.aquasec.com/nvd/cve-2022-37434