dockerfile基础镜像漏洞
ltx0633 opened this issue · comments
I think we can update this, using jdk17 even jdk21, would you like send a PR? thanks.
eclipse-temurin:17-jre appears to be a strong alternative.
![截屏2024-05-22 21 35 20](https://private-user-images.githubusercontent.com/47582550/332818170-9d98d799-a4cb-4e08-9145-04ece1867cc9.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjI3NTY1NzIsIm5iZiI6MTcyMjc1NjI3MiwicGF0aCI6Ii80NzU4MjU1MC8zMzI4MTgxNzAtOWQ5OGQ3OTktYTRjYi00ZTA4LTkxNDUtMDRlY2UxODY3Y2M5LnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MDQlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODA0VDA3MjQzMlomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPWYzMjI3YThlYzZkZTM4NDNlYTIxMTAyYTJmZDkxMzI0NzhmNzI0M2Y1NWNmMTVjNDVlYmRlOGY3YTI2NTRhNDAmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.uRwFtB-gL0N7Frw5GOuH7VFePHL7s0v65YSseHNFV-k)
According to the product image of PR. Whether to consider upgrading components (postgres, log4j), etc.
In addition, I have verified that eclipse-temurin:17-jre images are feasible in a production environment
eclipse-temurin:17-jre appears to be a strong alternative.
Whether to consider upgrading components (postgres, log4j), etc.
PRs are welcome to upgrade these dependencies.
This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.
This issue has been automatically closed because it has not had activity in the last 7 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.