https://linen.dev logo
Join Slack
Powered by
Hi Team, I was checking the docker images of permi...
# permit-saas
a
Hi Team, I was checking the docker images of permit/pdp-v2. Seems it has OS level vulnerabilities(using trivy) in its latest image(
permitio/pdp-v2:0.9.7
). Do we have some automation which fix it, or we need to fix from our end ?
a
Hi @Ambarish Singh, I'm an AI assistant for Permit.io. I'll analyze available sources and get back to you shortly.
Based on the available documentation, I don't have specific information about the vulnerability management process or automation for fixing OS-level vulnerabilities in the PDP Docker images. The PDP Docker image 
permitio/pdp-v2
is available from Docker Hub (1) (2) , and the Permit PDP is open-source and available publicly (2) . However, the documentation doesn't detail the vulnerability patching process or automation for the base OS layers. For this security concern, I recommend reaching out directly to Permit.io support at Email for official guidance on: • Their vulnerability management process • Update schedules for base images • Whether you should apply your own security patches Since you're reporting an issue with the PDP, it would be helpful if you could provide our engineers with: 1. Which Workspace / Project / Env you are using 2. What calls you are performing (as SDK code or CURL) 3. Which PDP version you are running (you mentioned 0.9.7) 4. The specific vulnerabilities identified by Trivy and their severity levels This information will help the team investigate and provide you with the most appropriate solution.
To learn more, see the sources I considered: [[1] Run the PDP (Policy Decision Point)](https://docs.permit.io/overview/run-pdp) [[2] Permit's PDP (Policy Decision Point)](https://docs.permit.io/concepts/pdp/overview)
d
Hey @Ambarish Singh, thank you for sharing that. We use Docker Scout for our Security Analysis and interestingly it does not show vulnerabilities for Alpine at the moment. PDP v0.9.7 has been released about 2 weeks ago, including updating the Alpine OS to the latest available. Can you please share your Image Scanning result? Does it also show if that issue is fixable? Thank you very much! 🌟
a
Screenshot 2025-10-21 at 4.38.16 PM.png
👀 1
These are all the fixable vulns that trivy is showing for 0.9.7
d
Thank you for that. I'm trying to release a new RC version to see if that resolves it, I'll let you know the results https://github.com/permitio/PDP/releases/tag/0.9.8-rc.1
a
Hi Dan, In the new image which is pushed(
pdp-v2:0.9.8-rc.1
), the vulnerabilities are resolved. Will the same patch be applied to v0.9.7 as well or other images which are stable ?
o
Hey @Ambarish Singh , the patch won’t be applied to previous versions but to only to new ones - in general all tags except 
latest
are considered immutable
d
Cool @Ambarish Singh, thank you for sharing that. I've started release of PDP v0.9.8, it will have the latest Alpine version. It should be available in a couple of minutes, I'll keep you posted 🌟 https://github.com/permitio/PDP/releases/tag/0.9.8
Hey @Ambarish Singh, happy to update the PDP v0.9.8 is now released 🚀
Open in Slack
PreviousNext
Powered by