Addressing vulnerability issues in Docker images #939
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 3 commits
October 3, 2023 15:49
- Fixing CRITICAL and HIGH severity issues detected by AWS Inspector in the Docker images in AWS ECR. - First off, picking up the certifi package dependency issue. - Upgrading to a newer version of miniconda which contains the recommended fixed version of certifi. - Additionally, corrected the curl URL to update the version suffix based on the required miniconda version to be installed.
…riable - Added EXP_CONDA_VER_SUFFIX environment variable so that it can be updated just in setup/export_versions.sh as per need. - Manually upgrading cryptography in .docker/setup_config.sh to the recommended version. - The latest miniconda package contains cryptography version 39.0.1 while latest available cryptography version recommended for fixing vulnerability is 41.0.4. - Hence, based on comments in this file, manually upgrading to latest version.
- v39.0.1 of cryptography comes with the miniconda-23.5.2 version. - However, for vulnerability fixing, cryptography had to be manually upgraded to v41.0.4. - This leaves v39.0.1 unused as a newer version is available; hence removing it.
shankari
approved these changes
Oct 6, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Fixing CRITICAL and HIGH severity issues detected by AWS Inspector in the Docker images in AWS ECR.
Working on more vulnerability issues...