Skip to content

build(images): update base images #7857

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
cx-miguel-dasilva merged 1 commit into from
Nov 17, 2025
Merged

build(images): update base images #7857

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM checkmarx/go:1.25.3-r0-ec1d7cfa02f047@sha256:ec1d7cfa02f047e65f6dbb49ac9c04f4e1b7e0bb2fc5c1b587468f0dd7b45b94 AS build_env
FROM checkmarx/go:1.25.4-r0-5b49a404b47807@sha256:5b49a404b47807c89aaff865b3732f8628cfa386b6643771164cc380d1214a8f AS build_env

# Copy the source from the current directory to the Working Directory inside the container
WORKDIR /app
Expand Down Expand Up @@ -29,9 +29,9 @@
# Runtime image
# Ignore no User Cmd since KICS container is stopped afer scan
# kics-scan ignore-line
FROM checkmarx/git:2.51.1-r1-1f23935e7d768c@sha256:1f23935e7d768c25fd1d8568a2e43873d60e0b0b4956a638df9c773cc89df9b0
FROM checkmarx/git:2.51.2-r0-f71264d8881353@sha256:f71264d88813532bb6ce45fc9348ae9e2cdf0e021a0d672864aac24e80c36e11

ENV TERM xterm-256color

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / integration-tests

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / Trivy docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / e2e-tests (1.24.x, ubuntu-latest, Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / Grype docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

# Copy built binary to the runtime container
# Vulnerability fixed in latest version of KICS remove when gh actions version is updated
Expand All @@ -47,7 +47,7 @@
USER root

# Healthcheck the container
ENV PATH $PATH:/app/bin

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / integration-tests

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / Trivy docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / e2e-tests (1.24.x, ubuntu-latest, Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

Check warning on line 50 in Dockerfile

View workflow job for this annotation

GitHub Actions / Grype docker image scan (Dockerfile)

Legacy key/value format with whitespace separator should not be used 

LegacyKeyValueFormat: "ENV key=value" should be used instead of legacy "ENV key value" format
More info: https://docs.docker.com/go/dockerfile/rule/legacy-key-value-format/

# Command to run the executable
ENTRYPOINT ["/app/bin/kics"]
Loading