Upgrade base image and add entries to .snyk file

cyber-dojo · Jan 17, 2024 · 402fdd6 · 402fdd6
1 parent 110bc33
commit 402fdd6
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 1 deletion.
diff --git a/.snyk b/.snyk
@@ -42,9 +42,19 @@ ignore:
         reason: Waiting for base image upgrade
         expires: 2024-03-01T15:48:22.212Z
         created: 2024-01-12T15:48:22.228Z
+  SNYK-ALPINE319-OPENSSH-6131646:
+    - '*':
+        reason: Waiting for base image upgrade
+        expires: 2024-03-01T15:48:22.212Z
+        created: 2024-01-12T15:48:22.228Z
   SNYK-ALPINE318-OPENSSL-6152404:
     - '*':
         reason: Waiting for base image upgrade
         expires: 2024-03-01T15:48:22.212Z
         created: 2024-01-12T15:48:22.228Z
+  SNYK-ALPINE319-OPENSSL-6159994:
+    - '*':
+        reason: Waiting for base image upgrade
+        expires: 2024-03-01T15:48:22.212Z
+        created: 2024-01-12T15:48:22.228Z
 patch: {}
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-ARG BASE_IMAGE=docker:24.0.7-alpine3.18
+ARG BASE_IMAGE=docker:24.0.7-alpine3.19
 FROM ${BASE_IMAGE}
 LABEL maintainer=jon@jaggersoft.com
 

diff --git a/docs/snyk-notes.txt b/docs/snyk-notes.txt
@@ -0,0 +1,13 @@
+
+If you want to check a locally created docker image, eg
+cyberdojo/docker-base:110bc33
+the command to use is:
+
+snyk container test cyberdojo/docker-base:110bc33 --file=Dockerfile --policy-path=.snyk
+
+Note that it is NOT:
+
+snyk container test cyberdojo/docker-base:110bc33 --file=Dockerfile --policy-file=.snyk
+
+which will _silently_ ignore an unknown flag.
+That's 30 minutes of my life gone right there.