kelly/donetick-notifier
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

[security][trivy-fs] HIGH DS-0017 in Dockerfile #5

New Issue
Closed
opened 2026-05-13 10:50:37 -05:00 by gitea-actions · 0 comments
gitea-actions bot commented 2026-05-13 10:50:37 -05:00
Copy Link
Copy Source

Security scanner: trivy-fs
Summary: 'RUN update' instruction alone
Repository: kelly/donetick-notifier
Branch/ref: fresh-copy
Commit: ef66b632b5558ba2d88318bcc5d6f33a8f0fd211
Action run: https://git.ktr32.org/kelly/donetick-notifier/actions/runs/28

Details:

  • Type: Misconfiguration
  • Severity: HIGH
  • Target: Dockerfile
  • ID: DS-0017
  • Message: The instruction 'RUN update' should always be followed by ' install' in the same RUN statement.
  • Resolution: Combine ' update' and ' install' instructions to single one
Security scanner: `trivy-fs` Summary: 'RUN <package-manager> update' instruction alone Repository: `kelly/donetick-notifier` Branch/ref: `fresh-copy` Commit: `ef66b632b5558ba2d88318bcc5d6f33a8f0fd211` Action run: https://git.ktr32.org/kelly/donetick-notifier/actions/runs/28 Details: - Type: Misconfiguration - Severity: HIGH - Target: Dockerfile - ID: DS-0017 - Message: The instruction 'RUN <package-manager> update' should always be followed by '<package-manager> install' in the same RUN statement. - Resolution: Combine '<package-manager> update' and '<package-manager> install' instructions to single one
kelly closed this issue 2026-05-13 11:15:47 -05:00
kelly added the vulnerability label 2026-05-26 21:27:10 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 vulnerability
wontfix
This won't be fixed
No Label vulnerability
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
kelly
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: kelly/donetick-notifier#5
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?