From 8f1c3ba216ae1ae799abaac1d604042d1bcf8ebf Mon Sep 17 00:00:00 2001 From: Rory Sheldon Date: Fri, 19 Apr 2024 15:58:15 +0100 Subject: [PATCH] fix: update Snyk base image Update Snyk Base Image to pickup security fixes. -- Snyk ProdSec --- vervet-underground/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vervet-underground/Dockerfile b/vervet-underground/Dockerfile index 0fa8ac5b..786ab974 100644 --- a/vervet-underground/Dockerfile +++ b/vervet-underground/Dockerfile @@ -28,7 +28,7 @@ RUN --mount=type=cache,target=/root/.cache/go-build \ # we're not changing anything, only making it explicit. # Thanks to emulation, this will also run on ARM Macs. # Advised to move from distroless to the secure base image - https://docs.google.com/document/d/1I-vxsuHlmBlM8JHSDpvOmVMGeQQcbPgb8jH1ELEE9wo/edit#heading=h.1xke9mez8zov -FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.1_202403150706 +FROM --platform=amd64 gcr.io/snyk-main/ubuntu-20:2.3.7_202404190856 COPY config.*.json / COPY --from=builder /go/bin/app /