mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
fb152b9114
## Summary This pull request is created by [Secure Repo](https://app.stepsecurity.io/securerepo) at the request of @zwass. Please merge the Pull Request to incorporate the requested changes. Please tag @zwass on your message if you have any questions related to the PR. You can also engage with the [StepSecurity](https://github.com/step-security) team by tagging @step-security-bot. ## Security Fixes ### Secure Dockerfiles Pin image tags to digests in Dockerfiles. With the Docker v2 API release, it became possible to use digests in place of tags when pulling images or to use them in FROM lines in Dockerfiles. - [The Open Source Security Foundation (OpenSSF) Security Guide](https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies) ## Feedback For bug reports, feature requests, and general feedback; please create an issue in [step-security/secure-repo](https://github.com/step-security/secure-repo). To create such PRs, please visit https://app.stepsecurity.io/securerepo. Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> --------- Signed-off-by: StepSecurity Bot <bot@stepsecurity.io> Co-authored-by: Zach Wasserman <zach@fleetdm.com>
34 lines
1.0 KiB
Docker
34 lines
1.0 KiB
Docker
FROM debian:bullseye-slim@sha256:cc4cc29b4ba8182fca324920f64ff68a3b24acefd4c7ba8a2e5bd4e81ac3bacf
|
|
|
|
RUN true \
|
|
&& dpkg --add-architecture i386 \
|
|
&& apt update \
|
|
&& apt install -y --no-install-recommends \
|
|
ca-certificates \
|
|
wine \
|
|
wine32 \
|
|
wget \
|
|
unzip \
|
|
osslsigncode \
|
|
&& mkdir /wix \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /home/wine
|
|
ENV HOME=/home/wine WINEPREFIX=/home/wine/.wine WINEARCH=win32 PATH="/home/wine/bin:$PATH" WINEDEBUG=-all
|
|
|
|
COPY make-aliases.sh /home/wine/make-aliases.sh
|
|
|
|
# Install .NET framework and WiX Toolset binaries
|
|
RUN wine wineboot && \
|
|
wget https://dl.winehq.org/wine/wine-mono/6.4.0/wine-mono-6.4.0-x86.msi -nv -O mono.msi \
|
|
&& wine msiexec /i mono.msi \
|
|
&& rm -f mono.msi \
|
|
&& wget https://github.com/wixtoolset/wix3/releases/download/wix3112rtm/wix311-binaries.zip -nv -O wix.zip \
|
|
&& mkdir wix \
|
|
&& unzip wix.zip -d wix \
|
|
&& rm -f wix.zip \
|
|
&& /home/wine/make-aliases.sh \
|
|
&& rm -f /home/wine/make-aliases.sh \
|
|
&& mkdir $WINEPREFIX/drive_c/temp
|
|
|
|
WORKDIR /wix |