oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-04 08:26:38 +01:00
Code Issues Packages Projects Releases Wiki Activity

chore: pin and update all workflow dependencies; add permission scopes (#2138)

Browse Source 
---------

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
This commit is contained in:
Christopher Angelo Phillips
2023-09-15 14:18:42 -04:00
committed by GitHub
parent 2eb2d55551
commit 094b41b301
26 changed files with 114 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/integration/test-fixtures/image-vertical-package-dups/Dockerfile
+2 -2
View File
@@ -1,6 +1,6 @@
FROM centos:7.9.2009
FROM centos:7.9.2009@sha256:be65f488b7764ad3638f236b7b515b3678369a5124c47b8d32916d6487418ea4
# modifying the RPM DB multiple times will result in duplicate packages when using all-layers (if there was no de-dup logic)
# curl is tricky, it already exists in the image and is being upgraded
RUN yum install -y wget-1.14-18.el7_6.1 curl-7.29.0-59.el7_9.1
RUN yum install -y vsftpd-3.0.2-29.el7_9
RUN yum install -y httpd-2.4.6-97.el7.centos.5
RUN yum install -y httpd-2.4.6-97.el7.centos.5