Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add httpd:2.4.46-alpine #18

Merged
merged 2 commits into from
Mar 25, 2024
Merged

Add httpd:2.4.46-alpine #18

merged 2 commits into from
Mar 25, 2024

Conversation

zhaixiaojuan
Copy link
Contributor

No description provided.

@qiangxuhui
Copy link
Contributor

  • lcr.loongnix.cn/apache/httpd:2.4.46-alpine
code level alerts
CIS-DI-0009 FATAL Use COPY : /bin/sh -c #(nop) ADD file:ce6f7829ba6ed6555c8473409305d81ca9bbd56a417d38749e98bd53ad3750e0 in .
DKL-DI-0004 FATAL Use --no-cache option if use 'apk add': /bin/sh -c export GNUPGHOME="$(mktemp -d)"; for key in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do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify httpd.tar.bz2.asc httpd.tar.bz2; command -v gpgconf && gpgconf --kill all
CIS-DI-0001 WARN Last user should not be root
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/local/apache2/bin/suexec

@qiangxuhui
Copy link
Contributor

  • lcr.loongnix.cn/apache/httpd:2.4.46-alpine
code level alerts
CIS-DI-0009 FATAL Use COPY : /bin/sh -c #(nop) ADD file:ce6f7829ba6ed6555c8473409305d81ca9bbd56a417d38749e98bd53ad3750e0 in .
DKL-DI-0004 FATAL Use --no-cache option if use 'apk add': /bin/sh -c export GNUPGHOME="$(mktemp -d)"; for key in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do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify httpd.tar.bz2.asc httpd.tar.bz2; command -v gpgconf && gpgconf --kill all
CIS-DI-0001 WARN Last user should not be root
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/local/apache2/bin/suexec

@qiangxuhui
Copy link
Contributor

  • lcr.loongnix.cn/apache/httpd:2.4.39-alpine
code level alerts
CIS-DI-0009 FATAL Use COPY : /bin/sh -c #(nop) ADD file:ce6f7829ba6ed6555c8473409305d81ca9bbd56a417d38749e98bd53ad3750e0 in .
DKL-DI-0004 FATAL Use --no-cache option if use 'apk add': /bin/sh -c export GNUPGHOME="$(mktemp -d)"; for key in A93D62ECC3C8EA12DB220EC934EA76E6791485A8 B9E8213AEFB861AF35A41F2C995E35221AD84DFF ; do gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; done; gpg --batch --verify httpd.tar.bz2.asc httpd.tar.bz2; command -v gpgconf && gpgconf --kill all
CIS-DI-0001 WARN Last user should not be root
CIS-DI-0005 INFO export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006 INFO not found HEALTHCHECK statement
CIS-DI-0008 INFO setuid file: urwxr-xr-x usr/local/apache2/bin/suexec

@zhaixiaojuan zhaixiaojuan merged commit 29eaa53 into Loongson-Cloud-Community:main Mar 25, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants