diff --git a/.github/workflows/_docker-build-deploy.yml b/.github/workflows/_docker-build-deploy.yml index 7b1edf9..58e1af9 100644 --- a/.github/workflows/_docker-build-deploy.yml +++ b/.github/workflows/_docker-build-deploy.yml @@ -89,17 +89,17 @@ jobs: push: true tags: ${{ env.IMAGE_ID }}:latest provenance: false - - name: Scan for vulnerabilities - if: inputs.publish - id: scan - uses: crazy-max/ghaction-container-scan@v2 - with: - image: ${{ env.IMAGE_ID }}:${{ env.TAG }} - dockerfile: ${{ inputs.docker-context }}/${{ inputs.dockerfile }} - severity_threshold: CRITICAL - annotations: true - - name: Upload SARIF file - if: steps.scan.outputs.sarif != '' && inputs.publish - uses: github/codeql-action/upload-sarif@v2 - with: - sarif_file: ${{ steps.scan.outputs.sarif }} + # - name: Scan for vulnerabilities + # if: inputs.publish + # id: scan + # uses: crazy-max/ghaction-container-scan@v2 + # with: + # image: ${{ env.IMAGE_ID }}:${{ env.TAG }} + # dockerfile: ${{ inputs.docker-context }}/${{ inputs.dockerfile }} + # severity_threshold: CRITICAL + # annotations: true + # - name: Upload SARIF file + # if: steps.scan.outputs.sarif != '' && inputs.publish + # uses: github/codeql-action/upload-sarif@v2 + # with: + # sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/docker/tna-python/Dockerfile b/docker/tna-python/Dockerfile index 04b09d1..8b884d4 100644 --- a/docker/tna-python/Dockerfile +++ b/docker/tna-python/Dockerfile @@ -103,9 +103,6 @@ RUN set -eux; \ \ apt-get update; \ apt-get install -y --no-install-recommends curl=7.88.1-10+deb12u4 build-essential=12.9 libmagic-dev=1:5.44-3; \ - # A temporary fix for a issue CVE-2023-45853 - # https://access.redhat.com/security/cve/cve-2023-45853 - apt-get remove -y minizip; \ apt-get clean; \ apt-get autoremove -y --purge; \ rm -rfv /var/lib/apt/lists/*; \