GitHub
02/04/2023, 3:54 PMx):
☑︎ Confirmed this is the right place to raise the issue - only issues related to the Dockerization of the Pact Broker should be raised here. Issues related to the Pact Broker application itself should be raised in the Pact Broker project.
☑︎ Upgraded to the latest Pact Broker Docker image OR
☑︎ Checked the </CHANGELOG.md|CHANGELOG> to see if the issue I am about to raise has been fixed
☑︎ Read the Troubleshooting page
Software versions
• pact-broker gem version: 2.106.0
• pact-broker docker version: 2.106.0.0
Expected behaviour
Use Alpine Linux 3.17 to avoid security issues related to version 3.16.
Actual behaviour
Alpine Linux 3.16 contains several packages (mariadb-deb, sqlite, libxml2) with reported CVE:s with severity level Critical and High.
Steps to reproduce
Scan the docker image with Jfrog Xray.
Relevent log files
N/A
pact-foundation/pact-broker-docker