Skip to content

Upda - #25

Merged
devops2626 merged 6 commits into
ecc-tools/ai-hack-simulation-conventions-1784778762113from
main
Jul 25, 2026
Merged

Upda#25
devops2626 merged 6 commits into
ecc-tools/ai-hack-simulation-conventions-1784778762113from
main

Conversation

@devops2626

Copy link
Copy Markdown
Owner

Title: chore: suppress CVE-2026-8376 and force linux/amd64 to avoid 32-bit perl issue

This PR:

  • Adds .trivyignore to suppress CVE-2026-8376 until Debian upstream provides a fix.
  • Forces --platform=linux/amd64 on both Dockerfile stages to avoid the 32-bit perl build affected by the CVE.

Rationale:
The perl-base package in the python:3.11-slim base image contains CVE-2026-8376 with no fixed Debian package yet; suppressing the Trivy alert prevents CI failures while forcing the AMD64 platform avoids the 32-bit-only impact of the vulnerability.

No functional code changes beyond the Docker platform pinning and Trivy ignore of the known-but-unfixed base image CVE.

@devops2626
devops2626 merged commit dc8f640 into ecc-tools/ai-hack-simulation-conventions-1784778762113 Jul 25, 2026
3 of 11 checks passed
devops2626 added a commit that referenced this pull request Jul 25, 2026
…onventions-1784778762113

Merge pull request #25 from devops2626/main
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant