[Snyk] Security upgrade python from 3.7-slim to 3.13.3-slim #88
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-5927132 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-5927132 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-6210098 - https://snyk.io/vuln/SNYK-DEBIAN12-GLIBC-6210098 - https://snyk.io/vuln/SNYK-DEBIAN12-KRB5-7411315
|
| @@ -1 +1 @@ | |||
| FROM python:3.7-slim | |||
| FROM python:3.13.3-slim | |||
There was a problem hiding this comment.
A user for the container has not been created
Resource: /terraform/aws/resources/Dockerfile. | Checkov ID: CKV_DOCKER_3
Description
The policy's primary purpose is to verify that a dedicated user has been explicitly created for running the container. This is essential to avoid running the container with root privileges, which could introduce significant security risks in case of a compromise. Running containers as a non-root user reduces the potential impact of a security breach.
| @@ -2,0 +1 @@ | |||
| FROM python:3.13.3-slim | |||
There was a problem hiding this comment.
Healthcheck instructions have not been added to container images
Resource: /terraform/aws/resources/Dockerfile. | Checkov ID: CKV_DOCKER_2
Description
This rule detects whether HEALTHCHECK instructions have been added to Docker container images. These instructions provide a way to check the health of the running container, ensuring that issues are detected and handled promptly, improving the reliability and stability of your containerized applications. Adding HEALTHCHECK instructions to your Dockerfiles follows best practices for Docker container health management.
Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
terraform/aws/resources/DockerfileWe recommend upgrading to
python:3.13.3-slim, as this image has only 38 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Vulnerabilities that will be fixed with an upgrade:
SNYK-DEBIAN12-GLIBC-5927132
SNYK-DEBIAN12-GLIBC-5927132
SNYK-DEBIAN12-GLIBC-6210098
SNYK-DEBIAN12-GLIBC-6210098
SNYK-DEBIAN12-KRB5-7411315
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.