frank/ruvnet--RuView
1
0
Fork 0
mirror of https://github.com/ruvnet/RuView synced 2026-08-03 19:21:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

security: repair scanning and close stale alert sources

Browse Source
This commit is contained in:
ruv
2026-08-02 15:22:13 -04:00
parent 42492e14a5
commit 5780c239e4
48 changed files with 427 additions and 325 deletions
Download Patch File Download Diff File Expand all files Collapse all files
v2/crates/nvsim-server/Dockerfile
+8 -2
View File
@@ -6,8 +6,11 @@
# Run:
# docker run --rm -p 7878:7878 nvsim-server:latest
FROM rust:1.81-slim-bookworm AS builder
FROM rust:1.81-slim-bookworm@sha256:f9fb6bdb0483de4ade93b262a3f6cf8c2985fca1d34784914bbcabd5a34d3197 AS builder
WORKDIR /build
# Debian security revisions intentionally float within the immutable base
# snapshot so rebuilds receive patched packages without brittle version pins.
# kics-scan ignore-line
RUN apt-get update && apt-get install -y --no-install-recommends \
pkg-config libssl-dev ca-certificates \
&& rm -rf /var/lib/apt/lists/*
@@ -46,7 +49,10 @@ EOF
RUN cargo build --release -p nvsim-server --bin nvsim-server
FROM debian:bookworm-slim
FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818
# Debian security revisions intentionally float within the immutable base
# snapshot so rebuilds receive patched packages without brittle version pins.
# kics-scan ignore-line
RUN apt-get update && apt-get install -y --no-install-recommends \
ca-certificates curl \
&& rm -rf /var/lib/apt/lists/* \