distroless

distroless copied to clipboard

fix: remove pkg_tar workaround from temurin archive

3

Removes the workaround for executable files in temurin_archive and replaces it with `tar` from bazel-lib. This PR introduces a new system dependency `awk` for the build. @loosebazooka is awk installed...

thesayyn

CVE-2023-24329

2

- [x ] I have read the [SECURITY.md](https://github.com/GoogleContainerTools/distroless/blob/main/SECURITY.md) - [ x] I understand that this repo tracks debian package releases and cannot fix debian CVEs on its own - [...

jonathannaguin

Reduce nodejs image size by removing /nodejs/include directory

12

**Describe the bug** Distroless nodejs images currently include the `/nodejs/include` directory (55.4M). A large portion of this is `/nodejs/include/node/openssl` (53.9M) which includes include files for multiple architectures and variants. **To...

pkwarren

Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependabot[bot]

Using official Python base images and packaging into distroless later on

10

Hello, I’ve been using official Docker images for python (eg. `python:3.11-slim-bookworm`) in my projects and I wanted to use multi stage build approach to package the final image into distroless...

artursmet

Google Cloud Container Registry will be closed after March 18, 2025. https://cloud.google.com/container-registry/docs/resources > Container Registry is deprecated and scheduled for shutdown. Effective May 15, 2024, Artifact Registry hosts images for...

eggplants

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.6 to 3.25.11. Changelog Sourced from github/codeql-action's changelog. CodeQL Action Changelog See the releases page for the relevant changes to the CodeQL CLI and language packs. Note...

dependabot[bot]

I understand there are multiple answers related to how to use env variables for java process in distroless image here. But I specifically want to ask about how we can...

bkrajendra

Add workspace references to deb repositories rule

1

This allows pulling those dependencies into other workspaces importing this repository, eg. for creating derived images with Bazel. Tested on amd64 and aarch64.

implr

Adjusting the number of cores or gc config based upon cgroups

1

A reason my coworker presented for not using distroless is that it would be hard to adjust the number of cores or gc config based upon cgroups. What's the distroless...

blockjon