Building own image for dex for fixing vulnerabilites #3396
Unanswered
manish222agr
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi,
We are currently using dex 38.0. It has some vulnerabilities related to open ssl, and the alpine linux has resolved this in their new release.
Impacted packages are:
I am planning to do below until we have new version 39.0 of dex.
Clone the dex repo from github.
Have a local copy of dockerfile in our repo.
Change the docker file to have alpine:3.19.1@sha256:6457d53fb065d6f250e1504b9bc42d5b6c65941d57532c072d929dd0628977d0.
Run the docker build providing path to this new local docker file.
Use the image it builds.
Please confirm and let me know if this should work and if I am missing any other steps.
Thanks.
Beta Was this translation helpful? Give feedback.
All reactions