Update zlib in alpine docker image

This prevents a (false positive) finding for CVE-2026-22184
with high severity by Trivy.
This commit is contained in:
Rene Pfeuffer
2026-03-11 09:39:48 +00:00
committed by Florian Scholdei
parent 66ef8b05e1
commit 7771d83e5f
2 changed files with 3 additions and 1 deletions

View File

@@ -0,0 +1,2 @@
- type: fixed
description: Update zlib library in alpine base image for docker to avoid CVE-2026-22184

View File

@@ -27,7 +27,6 @@ RUN set -x \
--compress=2 \
--output /javaruntime
# ---
# SCM-Manager runtime
@@ -45,6 +44,7 @@ COPY build/docker/opt /opt
RUN set -x \
# ttf-dejavu graphviz are required for the plantuml plugin
&& apk add --no-cache ttf-dejavu graphviz mercurial bash ca-certificates \
&& apk add --no-cache --upgrade zlib \
&& adduser -S -s /bin/false -h ${SCM_HOME} -D -H -u 1000 -G root scm \
&& mkdir -p ${SCM_HOME} ${CACHE_DIR} \
&& chmod +x /opt/scm-server/bin/scm-server \