Skip to content

fix(vulnerabilities): update dockerfile images to fix vulnerabilities #7757

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cx-artur-ribeiro merged 1 commit into from
Oct 7, 2025
+2 −2
Merged

fix(vulnerabilities): update dockerfile images to fix vulnerabilities #7757

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM checkmarx/go:1.25.1-r0-4c4611ff34fb2a@sha256:4c4611ff34fb2af13432a000fdda2abb0bceb4201e9c2b8081eb20df91175003 AS build_env
FROM checkmarx/go:1.25.1-r0-a5f6a49d313296@sha256:a5f6a49d313296a88aa414aa028035be91b9683330f8201ad2cd0747ba821c5b AS build_env

# Copy the source from the current directory to the Working Directory inside the container
WORKDIR /app
Expand Down Expand Up @@ -29,9 +29,9 @@
# Runtime image
# Ignore no User Cmd since KICS container is stopped afer scan
# kics-scan ignore-line
FROM checkmarx/git:2.51.0-r1-2d1628b5b0a188@sha256:2d1628b5b0a188eea1f362c71316553486f9b0fab150c292759a1343adb59399
FROM checkmarx/git:2.51.0-r1-b329c83e6a5a90@sha256:b329c83e6a5a90bafb24b7ef1ffffba7dac164df4cede2a00ede9c6084cbf876

ENV TERM xterm-256color

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / e2e-tests (1.24.x, ubuntu-latest, Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / integration-tests

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / Trivy docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / Grype docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

# Copy built binary to the runtime container
# Vulnerability fixed in latest version of KICS remove when gh actions version is updated
Expand All @@ -47,7 +47,7 @@
USER root

# Healthcheck the container
ENV PATH $PATH:/app/bin

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / e2e-tests (1.24.x, ubuntu-latest, Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / integration-tests

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / Trivy docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / Grype docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

# Command to run the executable
ENTRYPOINT ["/app/bin/kics"]
Loading