From 5b10981c95ab11609a53f4230610f2ee59530912 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 12 Jun 2026 09:01:14 +0000 Subject: [PATCH] fix: tool/codegen/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-16344303 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-16344325 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-16344297 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-16344322 - https://snyk.io/vuln/SNYK-DEBIAN12-GNUTLS28-16344333 --- tool/codegen/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tool/codegen/Dockerfile b/tool/codegen/Dockerfile index 587cd68cba..2c6cde6293 100644 --- a/tool/codegen/Dockerfile +++ b/tool/codegen/Dockerfile @@ -35,7 +35,7 @@ RUN wget -q https://github.com/envoyproxy/protoc-gen-validate/archive/refs/tags/ # Stage 2: Downloader - Download pre-built binaries -FROM debian:bookworm-slim AS downloader +FROM debian:12.14-slim AS downloader RUN apt-get update && apt-get install -y --no-install-recommends wget ca-certificates \ && rm -rf /var/lib/apt/lists/* @@ -61,7 +61,7 @@ RUN for target in x86_64 aarch_64; do \ # Stage 3: Final - Minimal runtime image -FROM debian:bookworm-slim AS final +FROM debian:12.14-slim AS final # Install protoc, proto files, and ca-certificates # libprotobuf-dev includes standard proto files in /usr/include/google/protobuf/