coryHawkvelt/gatehouse-api
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

security: upgrade some package versions
Push -> develop / Build Docker images (push) Failing after 13s
Details
Push -> develop / Deploy (push) Has been skipped
Details
Push -> develop / Notify on result (push) Successful in 0s
Details

Browse Source
This commit is contained in:
sangnn
2026-06-23 03:20:58 +00:00
parent f971c4cdaa
commit ada22e6017
7 changed files with 36 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+7 -2
View File
@@ -19,14 +19,19 @@ COPY requirements/base.txt requirements/base.txt
COPY requirements/production.txt requirements/production.txt
# Install dependencies
RUN pip install --no-cache-dir --upgrade pip wheel && \
# Upgrade build tooling too: clears CVE-2026-24049 (wheel) and CVE-2026-23949 (jaraco.context)
RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
pip install --no-cache-dir -r requirements/production.txt
# Production stage
FROM python:3.11-slim
# Install runtime dependencies
RUN apt-get update && apt-get install -y --no-install-recommends \
# apt-get upgrade pulls patched openssl/openssh/etc. so the image isn't pinned to
# whatever was current when the base layer was published.
# NOTE: openssh-client carries 3 CVEs (CVE-2026-35385/35386/35414). SSH CA signing
# uses sshkey-tools (pure Python), so drop this line if nothing shells out to ssh/scp.
RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
libpq5 \
curl \
openssh-client \