Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Base image security issues #7492

Open
ryckowski opened this issue Jan 6, 2020 · 3 comments
Open

Base image security issues #7492

ryckowski opened this issue Jan 6, 2020 · 3 comments
Labels
status/never-stale Marker that this issue should not be marked as stale

Comments

@ryckowski
Copy link

This is a...


[ ] Feature request
[ ] Regression (a behavior that used to work and stopped working in a new release)
[x] Bug report  
[ ] Documentation issue or request

Description

I've uploaded images to quay.io. Its security scanner display many security warnings. Here is one for syndesis-meta image

image

@zregvart
Copy link
Member

zregvart commented Jan 6, 2020

I think we should use a base image with smaller footprint. I'm subjective on the matter perhaps ubi-minimal?

@stale
Copy link

stale bot commented Apr 5, 2020

This issue has been automatically marked as stale because it has not had any activity since 90 days. It will be closed if no further activity occurs within 7 days. Thank you for your contributions!

@stale stale bot added the status/stale Issue considered to be stale so that it can be closed soon label Apr 5, 2020
@zregvart zregvart added the status/never-stale Marker that this issue should not be marked as stale label Apr 6, 2020
@stale stale bot removed the status/stale Issue considered to be stale so that it can be closed soon label Apr 6, 2020
@zregvart
Copy link
Member

#9804 introduces using ubi8/openjdk-8 for Java applications and built integrations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
status/never-stale Marker that this issue should not be marked as stale
Projects
None yet
Development

No branches or pull requests

2 participants