Skip to content

build(docker): use wolfi python as base - #1239

Open
6d7a wants to merge 1 commit into
mainfrom
6d7a/wolfi-base
Open

build(docker): use wolfi python as base#1239
6d7a wants to merge 1 commit into
mainfrom
6d7a/wolfi-base

Conversation

@6d7a

@6d7a 6d7a commented May 12, 2026

Copy link
Copy Markdown
Contributor

Context

The current docker base image is vulnerable to CVE-2026-33845.

What has been done

Use ghcr.io/gitguardian/wolfi/python:3.10-dev as a build image and cgr.dev/chainguard/wolfi-base as a runtime base.

@6d7a
6d7a requested a review from a team as a code owner May 12, 2026 15:24
@codecov

codecov Bot commented May 12, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.29%. Comparing base (e1ee306) to head (a25062f).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1239   +/-   ##
=======================================
  Coverage   93.29%   93.29%           
=======================================
  Files         184      184           
  Lines       10372    10372           
=======================================
  Hits         9677     9677           
  Misses        695      695           
Flag Coverage Δ
unittests 93.29% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@6d7a
6d7a force-pushed the 6d7a/wolfi-base branch 4 times, most recently from 66fe7a7 to c4909c8 Compare May 13, 2026 16:00
@6d7a
6d7a requested a review from mattisdalleau-gg May 14, 2026 11:51
Comment thread Dockerfile
@6d7a
6d7a force-pushed the 6d7a/wolfi-base branch 2 times, most recently from a09616f to e88d449 Compare May 19, 2026 10:10
@6d7a
6d7a requested a review from clement-tourriere May 21, 2026 12:49
@6d7a
6d7a force-pushed the 6d7a/wolfi-base branch 2 times, most recently from e88d449 to c1c4332 Compare May 25, 2026 09:51
@6d7a
6d7a force-pushed the 6d7a/wolfi-base branch from c1c4332 to a25062f Compare June 5, 2026 13:14
@benjaminrigaud-gg

Copy link
Copy Markdown
Contributor

The Wolfi images provided by chainguard are going to be charged. I'll keep you updated :zoi:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants