mirror of
https://github.com/scm-manager/scm-manager.git
synced 2026-03-22 03:51:36 +01:00
Update zlib in alpine docker image
This prevents a (false positive) finding for CVE-2026-22184 with high severity by Trivy.
This commit is contained in:
committed by
Florian Scholdei
parent
66ef8b05e1
commit
7771d83e5f
2
gradle/changelog/zlib.yaml
Normal file
2
gradle/changelog/zlib.yaml
Normal file
@@ -0,0 +1,2 @@
|
||||
- type: fixed
|
||||
description: Update zlib library in alpine base image for docker to avoid CVE-2026-22184
|
||||
@@ -27,7 +27,6 @@ RUN set -x \
|
||||
--compress=2 \
|
||||
--output /javaruntime
|
||||
|
||||
|
||||
# ---
|
||||
|
||||
# SCM-Manager runtime
|
||||
@@ -45,6 +44,7 @@ COPY build/docker/opt /opt
|
||||
RUN set -x \
|
||||
# ttf-dejavu graphviz are required for the plantuml plugin
|
||||
&& apk add --no-cache ttf-dejavu graphviz mercurial bash ca-certificates \
|
||||
&& apk add --no-cache --upgrade zlib \
|
||||
&& adduser -S -s /bin/false -h ${SCM_HOME} -D -H -u 1000 -G root scm \
|
||||
&& mkdir -p ${SCM_HOME} ${CACHE_DIR} \
|
||||
&& chmod +x /opt/scm-server/bin/scm-server \
|
||||
|
||||
Reference in New Issue
Block a user