Security: Pin Docker image versions (INF05/INF06) #45
Labels
No labels
bug
deferred
documentation
enhancement
feature
infra
integration
marketing
priority:high
priority:low
priority:medium
Pro
security
UX
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
frank/cookslate#45
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Dockerfile uses unpinned tags: node:22, php:8.1-apache, mysql:8, composer:2. No explicit USER directive.\n\nFix: Pin to specific SHA digests or patch versions. Add USER www-data directive.\n\nSecurity audit: INF05 (medium), INF06 (low)