patch base image so the trivy gate passes

2026-08-26 14:16:21 +00:00
parent 67eda1225a
commit 014d060a2b
1 changed files with 3 additions and 0 deletions
@@ -19,6 +19,9 @@ jobs:
        run: |
          cat > Dockerfile <<'DOCKER'
          FROM alpine:latest
+          # the scan below failed until this line was added - patching the base
+          # image is the fix, not lowering the severity threshold
+          RUN apk --no-cache upgrade
          RUN echo "built on $(uname -m)" > /where
          CMD cat /where
          DOCKER