Image Version Using 'latest' @ /build-environment/Dockerfile

[nleach999]

Checkmarx (IaC-Security): Image Version Using 'latest'
Checkmarx Project: checkmarx-ts/cx-supply-chain-toolkit
Repository URL: https://github.com/checkmarx-ts/cx-supply-chain-toolkit
Branch: master
Scan ID: 1d2e98e3-6db0-4376-8620-c9ac41d3ec76

---

When building images, always tag them with useful tags which codify version information, intended destination (prod or test, for instance), stability, or other information that is useful when deploying the application in different environments. Do not rely on the automatically-created latest tag

Locations:

Result 1:
Severity: MEDIUM
State: CONFIRMED
Status: RECURRENT
    File: /build-environment/Dockerfile[54,0]
    Expected value: FROM alpine:latest:'version' where version should not be 'latest'
    Actual value: FROM alpine:latest'
    Review result in Checkmarx One: Image Version Using 'latest'