Skip to content

SBCOSS-412: Updated Docker file-fixing image level vulnerability#211

Merged
pallakartheekreddy merged 2 commits intoSunbird-Lern:release-8.0.0from
Deeksha1502:release-8.0.0_RC5_vul_fix
Jul 28, 2025
Merged

SBCOSS-412: Updated Docker file-fixing image level vulnerability#211
pallakartheekreddy merged 2 commits intoSunbird-Lern:release-8.0.0from
Deeksha1502:release-8.0.0_RC5_vul_fix

Conversation

@Deeksha1502
Copy link
Contributor

@Deeksha1502 Deeksha1502 commented Jul 28, 2025

Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change.

Type of change

Please choose appropriate options.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

How Has This Been Tested?

Please describe the tests that you ran to verify your changes in the below checkboxes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration

  • Ran Test A
  • Ran Test B

Test Configuration:

  • Software versions:
  • Hardware versions:

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

Description by Korbit AI

What change is being made?

Update the Dockerfile to enhance security by upgrading packages, optimizing the apt-get operations, and removing unnecessary files to fix an image level vulnerability.

Why are these changes being made?

The changes address a security vulnerability identified in the image by ensuring packages are upgraded and cached files are removed after the package installation, reducing the potential for an attack vector. This approach minimizes the Docker image size and adheres to best practices for building Docker images.

Is this description stale? Ask me to generate a new description by commenting /korbit-generate-pr-description

Copy link

@korbit-ai korbit-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've completed my review and didn't find any issues... but I did find this kitten.

    |\__/,|   (`\
  _.|o o  |_   ) )
-(((---(((--------

Check out our docs on how you can make Korbit work best for you and your team.

Loving Korbit!? Share us on LinkedIn Reddit and X

@pallakartheekreddy pallakartheekreddy merged commit a1beea8 into Sunbird-Lern:release-8.0.0 Jul 28, 2025
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants