4 Commits

Author SHA1 Message Date
Christian Krakau-Louis f230a4d9c2 fix: Dockerfile to reduce vulnerabilities (#14)
Build and Push Docker Image / build-and-push (push) Has been cancelled
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN12-SQLITE3-10753055
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690985
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690987
- https://snyk.io/vuln/SNYK-DEBIAN12-PERL-5489190
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690990

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2026-05-17 14:51:06 +02:00
Christian Krakau-Louis b12ca085df fix: requirements.txt to reduce vulnerabilities (#16)
The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-WERKZEUG-14908843

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
2026-05-17 14:49:36 +02:00
Christian Krakau-Louis 804ec2f539 Merge pull request #15 from christianlouis/snyk-fix-5f4fe8a43316e4aae2123d91b39a82fc
[Snyk] Security upgrade python from 3.13.3-slim to 3.14.2-slim
2025-12-17 15:16:24 +01:00
snyk-bot db8e936c23 fix: Dockerfile to reduce vulnerabilities
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN12-SQLITE3-10753055
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690985
- https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-10690987
- https://snyk.io/vuln/SNYK-DEBIAN12-PERL-5489190
- https://snyk.io/vuln/SNYK-DEBIAN12-SYSTEMD-10264074
2025-12-17 14:15:05 +00:00
2 changed files with 2 additions and 1 deletions
+1 -1
View File
@@ -1,5 +1,5 @@
# Use an official Python runtime as a parent image # Use an official Python runtime as a parent image
FROM python:3.13.3-slim FROM python:3.14.2-slim
# Create a working directory # Create a working directory
WORKDIR /app WORKDIR /app
+1
View File
@@ -3,3 +3,4 @@ requests>=2.32.2
reportlab>=3.6.13 reportlab>=3.6.13
Faker>=18.9.0 Faker>=18.9.0
pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability
werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability