Skip to content

Commit bcc023e

Browse files
committed
trivy scanned severity fixed
1 parent 4d0954e commit bcc023e

1 file changed

Lines changed: 6 additions & 5 deletions

File tree

Dockerfile

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,18 +7,19 @@ RUN useradd -m appuser
77

88
# Install dependencies first (better caching)
99
COPY app/requirements.txt .
10-
RUN pip install --no-cache-dir -r requirements.txt \
11-
&& pip uninstall -y jaraco.context || true \
12-
&& pip install --no-cache-dir "jaraco.context==6.1.0"
10+
11+
RUN python -m pip install --no-cache-dir --upgrade pip setuptools wheel \
12+
&& python -m pip install --no-cache-dir -r requirements.txt \
13+
&& python -m pip uninstall -y jaraco.context || true \
14+
&& python -m pip install --no-cache-dir "jaraco.context==6.1.0" \
15+
&& python -m pip show jaraco.context
1316

1417
# Copy application code
1518
COPY app/ .
1619

17-
# Environment variables for Flask (Semgrep-safe)
1820
ENV FLASK_HOST=0.0.0.0
1921
ENV FLASK_PORT=5000
2022

21-
# Switch to non-root user
2223
USER appuser
2324

2425
EXPOSE 5000

0 commit comments

Comments
 (0)