[Snyk] Security upgrade alpine from latest to 3.23.3#13
[Snyk] Security upgrade alpine from latest to 3.23.3#13TheRedHatter wants to merge 1 commit intomainfrom
Conversation
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
![prisma-cloud-devsecops[bot]](https://avatars.githubusercontent.com/in/135857?s=60&v=4){kind=small}
| RUN go install -v github.com/projectdiscovery/mapcidr/cmd/mapcidr@latest | ||
|
|
||
| FROM alpine:latest | ||
| FROM alpine:3.23.3 |
There was a problem hiding this comment.
A user for the container has not been created
Resource: /vendor/github.com/projectdiscovery/mapcidr/Dockerfile. | Checkov ID: CKV_DOCKER_3
Description
The policy's primary purpose is to verify that a dedicated user has been explicitly created for running the container. This is essential to avoid running the container with root privileges, which could introduce significant security risks in case of a compromise. Running containers as a non-root user reduces the potential impact of a security breach.
| RUN go install -v github.com/projectdiscovery/mapcidr/cmd/mapcidr@latest | ||
|
|
||
| FROM alpine:latest | ||
| FROM alpine:3.23.3 |
There was a problem hiding this comment.
Healthcheck instructions have not been added to container images
Resource: /vendor/github.com/projectdiscovery/mapcidr/Dockerfile. | Checkov ID: CKV_DOCKER_2
Description
This rule detects whether HEALTHCHECK instructions have been added to Docker container images. These instructions provide a way to check the health of the running container, ensuring that issues are detected and handled promptly, improving the reliability and stability of your containerized applications. Adding HEALTHCHECK instructions to your Dockerfiles follows best practices for Docker container health management.
| RUN go install -v github.com/projectdiscovery/mapcidr/cmd/mapcidr@latest | ||
|
|
||
| FROM alpine:latest | ||
| FROM alpine:3.23.3 |
There was a problem hiding this comment.
busybox 1.37.0 / Dockerfile.FROM
Total vulnerabilities: 2
| Critical: 0 | High: 0 | Medium: 1 | Low: 1 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2025-60876 |  MEDIUM |
6.5 | - |
Open |
| CVE-2025-46394 |  LOW |
3.3 | - |
Open |
| RUN go install -v github.com/projectdiscovery/mapcidr/cmd/mapcidr@latest | ||
|
|
||
| FROM alpine:latest | ||
| FROM alpine:3.23.3 |
There was a problem hiding this comment.
busybox 1.37.0-r30 / Dockerfile.FROM
Total vulnerabilities: 1
| Critical: 0 | High: 0 | Medium: 1 | Low: 0 |
|---|
| Vulnerability ID | Severity | CVSS | Fixed in | Status |
|---|---|---|---|---|
| CVE-2025-60876 | MEDIUM |
6.5 | - |
Open |
2 participants
Snyk has created this PR to fix 0 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
vendor/github.com/projectdiscovery/mapcidr/DockerfileWe recommend upgrading to
alpine:3.23.3, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.