Skip to content

Use a package manager for installing binaries #212

@fgiloux

Description

@fgiloux

In some of our images we download binaries with curl and copy them into the filesystem.
Whenever possible we should use a package manager for the installation.
Examples:
https://github.com/openshift-pipelines/pipeline-service/blob/main/images/access-setup/Dockerfile#L8-L13

Rational: These binaries are not "visible" to image scanners, which means that CVEs may get unnoticed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions