Skip to content

Conversation

@sunnywu
Copy link
Contributor

@sunnywu sunnywu commented Jan 29, 2026

Summary

  • Updated eclipse-temurin Docker base image SHA to latest alpine 3.23 version in:
    • Dockerfile
    • scripts/azure-cc/Dockerfile
    • scripts/gcp-oidc/Dockerfile
  • Addresses SSL-related vulnerabilities detected in vulnerability scan
  • Aligns base image with uid2-validator fix

Test plan

  • Verify Docker images build successfully
  • Run existing tests to ensure no regressions
  • Confirm vulnerability scan passes with updated image

Updated alpine base image SHA to address vulnerabilities reported
in vulnerability scan.

# Install necessary packages and set up virtual environment
RUN apk update && apk add --no-cache jq python3 py3-pip && \
RUN apk update && apk add --no-cache --upgrade libpng && apk add --no-cache jq python3 py3-pip && \
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

libpng vulnerability fix. same for below

@sunnywu sunnywu merged commit 47b9d1a into main Jan 29, 2026
9 checks passed
@sunnywu sunnywu deleted the syw-UID2-6527-ssl-cve branch January 29, 2026 04:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants