Docker image vulnerabilties

[onacrame]

My organisation has allowed us a test environment to try out various Azure tools. The container built as part of this example is shown as having over a dozen vulnerabilties in Security Centre. What's the best way to update the image within the pipeline so that various packages are updated?

[j-so]

I would recommend using your own custom docker image. This guide shows how to create your own pipeline for building your own image: https://github.com/microsoft/MLOpsPython/blob/master/docs/custom_container.md

It sounds like there are certain packages that need to be updated. The packages installed during image build are here: https://github.com/microsoft/MLOpsPython/blob/master/diabetes_regression/ci_dependencies.yml. Which packages are causing the issue? Maybe we can update our yaml.

[onacrame]

Hi thanks for the prompt response. After I posted this there did seem to be a commit which resolved most of the issues.m Two remain outstanding. See below