We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 655314c commit 7f677f6Copy full SHA for 7f677f6
3 files changed
.grype.yaml
@@ -7,3 +7,5 @@ ignore:
7
reason: "Node 24: Node-tar patched but not yet available in Node.js base images"
8
- vulnerability: GHSA-5j98-mcp5-4vw2
9
reason: "Node 20: Node-glob patched but not yet available in Node.js base images, issue not exploitable in npm context"
10
+ - vulnerability: CVE-2025-60876
11
+ reason: "Alpine BusyBox: No fix available"
Dockerfile
@@ -1,5 +1,5 @@
1
# Set default values for build arguments
2
-ARG DEFRA_VERSION=2.10.2
+ARG DEFRA_VERSION=2.10.3
3
ARG BASE_VERSION=24.12.0-alpine3.22
4
5
FROM node:$BASE_VERSION AS production
JOB.env
@@ -1,2 +1,2 @@
-DEFRA_VERSION=2.10.2
+DEFRA_VERSION=2.10.3
IMAGE_NAME=node
0 commit comments