-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Dashboard Suite Flist (Grid Stack Suite Part 1 of 3) #277
Conversation
There're some alerts need fixing. the screenshots showing threefold.store and threefold.pro? are they the same instance pointed to with multiple records? |
I just tested on two domains at different moments in time. The deployment is done on the same URL. I will check for the alerts. But the root alert was also here: #267, and it got approved so I wonder if this one is OK to leave? |
@@ -0,0 +1,22 @@ | |||
FROM ubuntu:22.04 |
Check failure
Code scanning / Trivy
Image user should not be 'root' High
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
RUN apt-get update && \ | ||
apt-get install -y git ufw openssh-server pv curl |
Check failure
Code scanning / Trivy
'apt-get' missing '--no-install-recommends' High
Type: dockerfile
Vulnerability DS029
Severity: HIGH
Message: '--no-install-recommends' flag is missed: 'apt-get update && apt-get install -y git ufw openssh-server pv curl'
Link: DS029
We won't use flist and dashboard apps for the grid stack. |
Work Done
Status
Project
Screenshot
References
Future Work