Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add build dependencies for Docker #1864

Merged
merged 1 commit into from
Aug 23, 2024
Merged

Add build dependencies for Docker #1864

merged 1 commit into from
Aug 23, 2024

Conversation

presidentbeef
Copy link
Owner

It seems this breaks for every release...

Copy link

dryrunsecurity bot commented Aug 23, 2024

DryRun Security Summary

The provided code change is a Dockerfile update to improve the build process of the Brakeman application, a static code analysis tool for Ruby on Rails applications, by installing the necessary build dependencies for the Alpine-based Docker image.

Expand for full summary

Summary:

The provided code change is for a Dockerfile, which is a script used to build Docker images. The changes appear to be focused on improving the build process of the Brakeman application, a static code analysis tool for Ruby on Rails applications. The key change is the addition of the apk --update add build-base command, which installs the necessary build dependencies for the Alpine-based Docker image. This is likely required for compiling and installing the Brakeman gem and its dependencies.

From an application security perspective, this change is not directly related to the security of the Brakeman application itself. However, it is important to ensure that the build process is secure and that the final Docker image does not contain any unnecessary or vulnerable components. Additionally, it's a good practice to regularly review the dependencies and update them to the latest versions to address any known security vulnerabilities. This can be done as part of the continuous integration and deployment process.

Files Changed:

  • Dockerfile: The changes in this file are focused on improving the build process of the Brakeman application. The key change is the addition of the apk --update add build-base command, which installs the necessary build dependencies for the Alpine-based Docker image. This is likely required for compiling and installing the Brakeman gem and its dependencies.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer Findings
Sensitive Files Analyzer 1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

@presidentbeef presidentbeef merged commit c25fcae into main Aug 23, 2024
19 checks passed
@presidentbeef presidentbeef deleted the fix_docker_once_more branch August 23, 2024 06:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant