truss
truss copied to clipboard
arm build needs to have build-essential installed, remove after built
:rocket: What
Build multiarch image for context builder
:computer: How
arm64 needs to have build-essential bundle and rustup installed. They are removed after the build.
:microscope: Testing
@zhangluva what was the context for running poetry update
here? I think this should be fine, but I'm a little nervous about updating all of these packages
@zhangluva what was the context for running
poetry update
here? I think this should be fine, but I'm a little nervous about updating all of these packages
The build fails on a local Mac test without updating the dependencies, which suggests that regularly updating dependencies should be a standard practice. After updating, the vulnerabilities in the image decreased significantly, from 507 to 135.