From bb3da9b9062cc86c581529eaf63353821cb94dab Mon Sep 17 00:00:00 2001 From: Rory Sheldon Date: Thu, 6 Jun 2024 10:04:12 +0100 Subject: [PATCH] fix: update Snyk base image Update Snyk Base Image to pickup security fixes. -- Snyk ProdSec --- vervet-underground/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vervet-underground/Dockerfile b/vervet-underground/Dockerfile index 656f6977..ff81121f 100644 --- a/vervet-underground/Dockerfile +++ b/vervet-underground/Dockerfile @@ -31,7 +31,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \ # we're not changing anything, only making it explicit. # Thanks to emulation, this will also run on ARM Macs. # Advised to move from distroless to the secure base image - https://docs.google.com/document/d/1I-vxsuHlmBlM8JHSDpvOmVMGeQQcbPgb8jH1ELEE9wo/edit#heading=h.1xke9mez8zov -FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.7_202404190856 +FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.11_202406050942 COPY config.*.json / COPY --from=builder /go/bin/app /