Dockerfile: unpin ca-certificates version

this is just unnecessary and insecure actually you want to use the newest version of ca-certificates as it might have excluded CAs that lost their private keys Signed-off-by: Christoph Ostarek <[email protected]>
lf-edge · Sep 10, 2024 · 00a1981 · 00a1981
1 parent 8bd49ae
commit 00a1981
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -14,7 +14,8 @@ RUN make tools OUTDIR=/usr/local/bin
 
 # Deploy the application binaries into a lean image
 FROM alpine:3.20
-RUN apk --no-cache add ca-certificates=20240226-r0 \
+# hadolint ignore=DL3018
+RUN apk --no-cache add ca-certificates \
   && update-ca-certificates
 
 COPY --from=builder /usr/local/bin/* /usr/local/bin/