You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix(model-server): change the model-server base image to RedHat
Description from #92
As discussed in a meeting yesterday, in order to reduce the number of vulnerable libraries in the dockerimage, I would suggest to switch for the RedHat-based OpenJDK image. The new model-server image was working fine for our use cases.
According to trivy, the openjdk:11 base image contains 323 vulnerable libs/software (UNKNOWN: 0, LOW: 123, MEDIUM: 61, HIGH: 109, CRITICAL: 30).
According to trivy, the RedHat-based base image contains 97 vulnerable libs/software (UNKNOWN: 0, LOW: 52, MEDIUM: 45, HIGH: 0, CRITICAL: 0).
Trivy was run on the latest modelix-model image (image ID 3d0f0ea586e4) to obtain this result. The used command was trivy image modelix/modelix-model:latest .
0 commit comments