diff --git a/.trivyignore b/.trivyignore deleted file mode 100644 index 154bba8..0000000 --- a/.trivyignore +++ /dev/null @@ -1,8 +0,0 @@ -# This vulnerability has been fixed in alpine 3.14.6. -# We have upgraded to 3.14.6, but the aquasecurity/trivy-action -# v0.2.4 keeps failing because the database is not up to date. -# https://github.com/aquasecurity/trivy/issues/1988 -CVE-2022-28391 - -# The zgrep utility is not installed in the linux-utils image -CVE-2022-1271 diff --git a/Dockerfile b/Dockerfile index 693e05c..a62d90c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM alpine:3.14.10 +FROM alpine:3.20.1 RUN apk add --no-cache util-linux xfsprogs xfsprogs-extra lvm2 device-mapper e2fsprogs-extra quota-tools