Merge pull request #175 from permitio/omer/per-10691-fix-pdp-vulnerab…

…ilities-scanned-by-jfrog-xray

Fix pip and setuptools CVEs

Dockerfile

@@ -91,6 +91,9 @@ COPY kong_routes.json /config/kong_routes.json
 COPY ./scripts/gunicorn_conf.py ./gunicorn_conf.py
 # copy app code
 COPY . ./
+
+RUN pip uninstall -y pip setuptools
+
 # Make sure scripts in .local are usable:
 ENV PATH="/:/app/bin:/home/permit/.local/bin:$PATH"
 # uvicorn config ------------------------------------

Makefile

@@ -24,7 +24,7 @@ build-arm64: prepare
 	@docker buildx build --platform linux/arm64 -t permitio/pdp-v2:$(VERSION) . --load
 
 run: run-prepare
-	@docker run -it -p 7766:7000 --env PDP_API_KEY=$(API_KEY) --env PDP_DEBUG=true permitio/pdp-v2:$(VERSION)
+	@docker run -it --rm -p 7766:7000 --env PDP_API_KEY=$(API_KEY) --env PDP_DEBUG=true permitio/pdp-v2:$(VERSION)
 
 run-on-background: run-prepare
-	@docker run -it -d -p 7766:7000  --env PDP_API_KEY=$(API_KEY) --env PDP_DEBUG=true permitio/pdp-v2:$(VERSION)
+	@docker run -it --rm -d -p 7766:7000  --env PDP_API_KEY=$(API_KEY) --env PDP_DEBUG=true permitio/pdp-v2:$(VERSION)

requirements.txt

@@ -14,4 +14,3 @@ httpx>=0.27.0,<1
 protobuf>=3.20.2 # not directly required, pinned by Snyk to avoid a vulnerability
 opal-common==0.7.6
 opal-client==0.7.6
-setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability