Skip to content

chore: Update Docker base image and components#7418

Open
omryMen wants to merge 8 commits intomainfrom
security/update-docker-base-image
Open

chore: Update Docker base image and components#7418
omryMen wants to merge 8 commits intomainfrom
security/update-docker-base-image

Conversation

@omryMen
Copy link
Copy Markdown
Contributor

@omryMen omryMen commented Jan 15, 2026

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Changes applied to both root Dockerfile and kubernetes/Dockerfile. All changes are backward-compatible and non-breaking. Addresses security team concerns about outdated components.

  • Upgrade base image from python:3.11-slim to python:3.12-slim
  • Add explicit pip, setuptools, and wheel upgrade before installing dependencies
  • Maintain all existing security features (apt-get upgrade, checksum verification)
  • Add --no-cache-dir flags to pip install commands for reduced image size

Fixes # (issue)

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my feature, policy, or fix is effective and works
  • New and existing tests pass locally with my changes

- Upgrade base image from python:3.11-slim to python:3.12-slim
- Add explicit pip, setuptools, and wheel upgrade before installing dependencies
- Maintain all existing security features (apt-get upgrade, checksum verification)
- Add --no-cache-dir flags to pip install commands for reduced image size

Changes applied to both root Dockerfile and kubernetes/Dockerfile.
All changes are backward-compatible and non-breaking.
Addresses security team concerns about outdated components.
@omryMen omryMen changed the title security: Update Docker base image and components chore: Update Docker base image and components Jan 18, 2026
Comment thread kubernetes/Dockerfile Outdated
Comment thread kubernetes/Dockerfile Outdated
Comment thread Dockerfile Outdated
Comment thread Dockerfile Outdated
Comment thread Dockerfile
Copy link
Copy Markdown
Contributor

@omriyoffe-panw omriyoffe-panw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks Good!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants