Skip to content

SBCOSS-412: Updated Docker file for image level vulnerability fix - #214

Merged
pallakartheekreddy merged 2 commits into
Sunbird-Lern:release-5.0.2from
Deeksha1502:release-5.0.2_RC2_vul_fix
Jul 28, 2025
Merged

SBCOSS-412: Updated Docker file for image level vulnerability fix#214
pallakartheekreddy merged 2 commits into
Sunbird-Lern:release-5.0.2from
Deeksha1502:release-5.0.2_RC2_vul_fix

Conversation

@Deeksha1502

@Deeksha1502 Deeksha1502 commented Jul 28, 2025

Copy link
Copy Markdown

Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change.

Type of change

Please choose appropriate options.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

How Has This Been Tested?

Please describe the tests that you ran to verify your changes in the below checkboxes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration

  • Ran Test A
  • Ran Test B

Test Configuration:

  • Software versions: Java-11, play2-2.7.2
  • Hardware versions: 2 CPU/ 4GB RAM

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

Description by Korbit AI

What change is being made?

Update the Dockerfile to fix image-level vulnerabilities by upgrading packages using apk upgrade, adding missing no-cache flags, consolidating package additions, and cleaning up cache after installation.

Why are these changes being made?

The changes address security vulnerabilities present in the Docker image by ensuring that all installed packages are updated to their latest versions and unnecessary caches are removed to reduce the attack surface and overall image size. This approach follows best practices for building secure and efficient Docker images.

Is this description stale? Ask me to generate a new description by commenting /korbit-generate-pr-description

@korbit-ai korbit-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've completed my review and didn't find any issues... but I did find this bear.

/  \.-"""-./  \
\    -   -    /
 |   o   o   |
 \  .-'''-.  /
  '-\__Y__/-'
     `---`

Check out our docs on how you can make Korbit work best for you and your team.

Loving Korbit!? Share us on LinkedIn Reddit and X

@pallakartheekreddy
pallakartheekreddy merged commit 3d127f6 into Sunbird-Lern:release-5.0.2 Jul 28, 2025
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants