From 0379f9ac9f43ebdb49b7ee5afa391dc49fe86994 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Jul 2026 00:37:49 +0000 Subject: [PATCH] fix: tool/codegen/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-XZUTILS-15895807 - https://snyk.io/vuln/SNYK-DEBIAN12-ZLIB-6008963 - https://snyk.io/vuln/SNYK-DEBIAN12-UTILLINUX-17690420 - https://snyk.io/vuln/SNYK-DEBIAN12-UTILLINUX-17690420 - https://snyk.io/vuln/SNYK-DEBIAN12-UTILLINUX-17690420 --- tool/codegen/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tool/codegen/Dockerfile b/tool/codegen/Dockerfile index 587cd68cba..31456b1f76 100644 --- a/tool/codegen/Dockerfile +++ b/tool/codegen/Dockerfile @@ -35,7 +35,7 @@ RUN wget -q https://github.com/envoyproxy/protoc-gen-validate/archive/refs/tags/ # Stage 2: Downloader - Download pre-built binaries -FROM debian:bookworm-slim AS downloader +FROM debian:12.15-slim AS downloader RUN apt-get update && apt-get install -y --no-install-recommends wget ca-certificates \ && rm -rf /var/lib/apt/lists/* @@ -61,7 +61,7 @@ RUN for target in x86_64 aarch_64; do \ # Stage 3: Final - Minimal runtime image -FROM debian:bookworm-slim AS final +FROM debian:12.15-slim AS final # Install protoc, proto files, and ca-certificates # libprotobuf-dev includes standard proto files in /usr/include/google/protobuf/