QUA-502: Set beta base image to alpine:3.13.7#92

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Jump to bottom

Merged

f-moya merged 1 commit intochannel/betafromQUA-502/fix-beta-image

Mar 2, 2022

Merged

QUA-502: Set beta base image to alpine:3.13.7#92

f-moya merged 1 commit intochannel/betafromQUA-502/fix-beta-image

Mar 2, 2022

Conversation

Copy link

f-moya commentedMar 2, 2022

According to what is exposed onQUA-502 ourlatest update introduced new build failures for some of the users using thestable channel.

The motivation behind#88 was to resolve critical vulnerabilities reported by snyk.

This update to usealpine:3.13.7 seems to be compliant with snyk.

Testing codeclimate/codeclimate-phpcodesniffer:latest...Organization:      fede-moyaPackage manager:   apkProject name:      docker-image|codeclimate/codeclimate-phpcodesnifferDocker image:      codeclimate/codeclimate-phpcodesniffer:latestPlatform:          linux/amd64Base image:        alpine:3.13.7Licenses:          enabled✔ Tested 37 dependencies for known issues, no vulnerable paths found.According to our scan, you are currently using the most secure version of the selected base image

I have tested this image locally using different phpcodesniffer's configurations extracted from the users that reported having issues the first time. Still there is change for some user to experience some kind of trouble with this new image. If that happens the plan is to go a case by cases basis to resolve the problem.