Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TRG 4.02 Using un-altered container base image #191

Closed
Tracked by #190
SebastianBezold opened this issue Nov 21, 2023 · 1 comment · Fixed by #199
Closed
Tracked by #190

TRG 4.02 Using un-altered container base image #191

SebastianBezold opened this issue Nov 21, 2023 · 1 comment · Fixed by #199

Comments

@SebastianBezold
Copy link
Contributor

SebastianBezold commented Nov 21, 2023

The Dockerfile present for tag v0.2.14 (the release version) does use the alpine package manager to upgrade system dependencies.
These kind of upgrades alter the base container image in a way, that we cannot rely on the published container scans provided by DockerHub.
Therefore package manager updates/upgrades must not be present in our Dockerfiles

See the upgraded TRG 4.02 descriptions for a more detailed explanation

@SebastianBezold SebastianBezold changed the title TRG 4.02 base image is agreed TRG 4.02 Using un-altered container base image Nov 21, 2023
@shijinrajbosch
Copy link
Contributor

Hi @SebastianBezold,

Thanks for the review comment. We will check the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants