dockerfile基础镜像漏洞
ltx0633 opened this issue · comments
你的特性请求和某个问题有关吗？请描述
在安全合规时发现镜像存在漏洞，是否适用其他版本的jre？
清晰简洁地描述一下你希望的解决方案
更新基础镜像
清晰简洁地描述一下这个特性的备选方案
其它背景
I think we can update this, using jdk17 even jdk21, would you like send a PR? thanks.
eclipse-temurin:17-jre appears to be a strong alternative.
According to the product image of PR. Whether to consider upgrading components (postgres, log4j), etc.
In addition, I have verified that eclipse-temurin:17-jre images are feasible in a production environment
eclipse-temurin:17-jre appears to be a strong alternative.
Whether to consider upgrading components (postgres, log4j), etc.
PRs are welcome to upgrade these dependencies.
This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.
This issue has been automatically closed because it has not had activity in the last 7 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.