[Snyk] Security upgrade python from 3.7.5-buster to 3.12.0b1-buster

[snyk-bot]

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

• pygoat/Dockerfile

We recommend upgrading to python:3.12.0b1-buster, as this image has only 366 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity	Priority Score / 1000	Issue	Exploit Maturity
	714	Exposure of Resource to Wrong Sphere SNYK-DEBIAN10-CURL-3065760	No Known Exploit
	714	Double Free SNYK-DEBIAN10-CURL-466509	No Known Exploit
	714	Buffer Overflow SNYK-DEBIAN10-CURL-466510	No Known Exploit
	714	Directory Traversal SNYK-DEBIAN10-DPKG-2847944	No Known Exploit
	714	Integer Overflow or Wraparound SNYK-DEBIAN10-GIT-3232718	No Known Exploit

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal

[msant262]

Checkmarx One – Scan Summary & Details – 0a5f6f23-c747-4f5e-a169-61f416bd9eb2

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Pip install Keeping Cached Packages	/Dockerfile: 23	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 9	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 20	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Unpinned Package Version in Pip Install	/Dockerfile: 20	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Unpinned Package Version in Pip Install	/Dockerfile: 23	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 9	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

Fixed Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Pip install Keeping Cached Packages	/Dockerfile: 9	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 23	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 20	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Unpinned Package Version in Pip Install	/Dockerfile: 20	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Unpinned Package Version in Pip Install	/Dockerfile: 23	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 9	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.