Building own image for dex for fixing vulnerabilites #3396
Unanswered
manish222agr
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hi,
We are currently using dex 38.0. It has some vulnerabilities related to open ssl, and the alpine linux has resolved this in their new release.
Impacted packages are:
I am planning to do below until we have new version 39.0 of dex.
Clone the dex repo from github.
Have a local copy of dockerfile in our repo.
Change the docker file to have alpine:3.19.1@sha256:6457d53fb065d6f250e1504b9bc42d5b6c65941d57532c072d929dd0628977d0.
Run the docker build providing path to this new local docker file.
Use the image it builds.
Please confirm and let me know if this should work and if I am missing any other steps.
Thanks.
Beta Was this translation helpful? Give feedback.
All reactions