chore: apply Dockerfile change for security scan (target tag 0.12.1rc…

docker/Dockerfile

@@ -1,14 +1,16 @@
 ARG python_version=3.9.20
-FROM python:${python_version}-slim-bullseye AS build
+ARG base_os=bookworm
+FROM python:${python_version}-slim-${base_os} AS build
 
 WORKDIR /src
 
 ADD . .
 
 RUN pip install --no-cache-dir poetry
+RUN pip install --no-cache-dir --upgrade setuptools==78.1.1 wheel
 RUN poetry build
 
-FROM python:${python_version}-slim-bullseye AS main
+FROM python:${python_version}-slim-${base_os} AS main
 
 ARG uid=1001
 ARG user=aries
@@ -47,19 +49,19 @@ RUN apt-get update -y && \
     build-essential \
     bzip2 \
     curl \
-    git \
     less \
     libffi-dev \
     libgmp10 \
     liblzma5 \
     libncurses5 \
     libncursesw5 \
-    libsecp256k1-0 \
     libzmq5 \
     net-tools \
     openssl \
     sqlite3 \
     zlib1g && \
+    apt-get upgrade -y && \
+    apt-get autoremove -y && \
     rm -rf /var/lib/apt/lists/* /usr/share/doc/*
 
 WORKDIR $HOME
@@ -88,6 +90,7 @@ RUN chown -R $user:root $HOME/.indy_client $HOME/.aries_cloudagent && \
 # Create /home/indy and symlink .indy_client folder for backwards compatibility with artifacts created on older indy-based images.
 RUN mkdir -p /home/indy
 RUN ln -s /home/aries/.indy_client /home/indy/.indy_client
+RUN python -m pip install --upgrade pip setuptools==78.1.1 wheel || true
 
 # Install ACA-py from the wheel as $user,
 # and ensure the permissions on the python 'site-packages' and $HOME/.local folders are set correctly.
@@ -97,6 +100,9 @@ RUN aries_cloudagent_package=$(find ./ -name "aries_cloudagent*.whl" | head -n 1
     echo "Installing ${aries_cloudagent_package} ..." && \
     pip install --no-cache-dir --find-links=. ${aries_cloudagent_package}${acapy_reqs} && \
     rm aries_cloudagent*.whl && \
+    python -m pip install --user --upgrade pip setuptools wheel && \
+    python -m pip install --user --upgrade --no-cache-dir setuptools==78.1.1 || true && \
+    python -m pip install --user --upgrade --no-cache-dir ecdsa==0.19.1 || true && \
     chmod +rx $(python -m site --user-site) $HOME/.local
 
 # Clean-up unneccessary build dependencies and reduce final image size