[Snyk] Security upgrade python from 3.12.3-alpine to 3.13.0rc1-alpine

[zencircle]

Snyk has created this PR to fix 2 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile.mac_chip

We recommend upgrading to python:3.13.0rc1-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Use After Free SNYK-ALPINE320-BUSYBOX-7233533	514
	Use After Free SNYK-ALPINE320-BUSYBOX-7233533	514
	Use After Free SNYK-ALPINE320-BUSYBOX-7233533	514
	Use After Free SNYK-ALPINE320-BUSYBOX-7233586	514
	Use After Free SNYK-ALPINE320-BUSYBOX-7233586	514

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use After Free

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.

[jcadam14]

Rejecting this PR. The official release of python is 3.12 so we wouldn't want to upgrade to 3.13 yet, but our current version of alpine is actually running the patched version of busybox being called out here. As the CVE mentions, should be running with an alpine version that uses busybox 1.36.1-r29 or higher. As you can see below, our current containers are in compliance. This is a problem with the security scans only detecting busybox v. 1.36.1 and not recognizing the patched release version (example of others receiving false positive check nodejs/docker-node#2116)

/usr/app/src $ apk info --no-cache busybox
fetch https://alpine.global.ssl.fastly.net/alpine/v3.20/main/x86_64/APKINDEX.tar.gz
fetch https://alpine.global.ssl.fastly.net/alpine/v3.20/community/x86_64/APKINDEX.tar.gz
busybox-1.36.1-r29 description:
Size optimized toolbox of many common UNIX utilities

busybox-1.36.1-r29 webpage:
https://busybox.net/

busybox-1.36.1-r29 installed size:
908 KiB