Update go to 1.21.10
Orca Security Scan Summary
| Status | Check | Issues by priority | |
|---|---|---|---|
 Passed |
Infrastructure as Code |  0  1  0  4 |
View in Orca |
🛡️ The following IaC misconfigurations have been detected
| NAME | FILE | ||
|---|---|---|---|
|
Missing User Instruction | ...r/plugins/Dockerfile | View in code |
|
Apt Get Install Lists Were Not Deleted | ...r/plugins/Dockerfile | View in code |
|
Apt Get Install Lists Were Not Deleted | ...r/plugins/Dockerfile | View in code |
|
Update Instruction Alone | ...r/plugins/Dockerfile | View in code |
|
Update Instruction Alone | ...r/plugins/Dockerfile | View in code |
Annotations
Check warning on line 16 in docker/plugins/Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[INFO] Apt Get Install Lists Were Not Deleted
Details:
After using apt-get install, it is needed to delete apt-get lists
Recommendation:
After using apt-get install, the apt-get lists should be deleted
Check warning on line 13 in docker/plugins/Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[INFO] Apt Get Install Lists Were Not Deleted
Details:
After using apt-get install, it is needed to delete apt-get lists
Recommendation:
After using apt-get install, the apt-get lists should be deleted
Check warning on line 16 in docker/plugins/Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[INFO] Update Instruction Alone
Details:
Instruction 'RUN <package-manager> update' should always be followed by
'<package-manager> install' in the same RUN statement
Recommendation:
Instruction 'RUN apt-get ["install", "source-install", "reinstall"]' should be
combined with 'RUN apt-get ["update"]' in the same 'RUN' statement
Check warning on line 13 in docker/plugins/Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[INFO] Update Instruction Alone
Details:
Instruction 'RUN <package-manager> update' should always be followed by
'<package-manager> install' in the same RUN statement
Recommendation:
Instruction 'RUN apt-get ["install", "source-install", "reinstall"]' should be
combined with 'RUN apt-get ["update"]' in the same 'RUN' statement
Check warning on line 4 in docker/plugins/Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[MEDIUM] Missing User Instruction
Details:
A user should be specified in the dockerfile, otherwise the image will run as
root
Recommendation:
The 'Dockerfile' should contain the 'USER' instruction