[Snyk] Security upgrade nginx from stable-alpine to 1.27.2-alpine3.20 #109
mjanezdocker-pr.yml
on: pull_request
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387
1m 11s
Annotations
6 warnings and 1 notice
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile#L27
Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile#L27
Pin versions in pip. Instead of `pip install <package>` use `pip install <package>==<version>` or `pip install --requirement <requirements file>`
|
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile#L75
Use WORKDIR to switch to a directory
|
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile#L75
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile.ghcr#L24
Use WORKDIR to switch to a directory
|
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile.ghcr#L24
Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
runner/test-docker-pr:snyk-fix-0f35788ec2788692e5ae776e5acda387:
ckan/Dockerfile#L27
Avoid additional packages by specifying `--no-install-recommends`
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
mjanez~ckan-docker~2NWKDF.dockerbuild
|
21.9 KB |
|
|
mjanez~ckan-docker~M7QE8H.dockerbuild
|
26.3 KB |
|
|
mjanez~ckan-docker~OSQ9LV.dockerbuild
|
22.4 KB |
|
|
mjanez~ckan-docker~TEPTS8.dockerbuild
|
27.3 KB |
|
|
mjanez~ckan-docker~VE5T4R.dockerbuild
|
24.3 KB |
|