Fixes (temporarily) curl piped to shell security vulnerability

This commit is contained in:
Sean Sullivan 2021-07-27 16:31:11 -07:00
parent d92b788faa
commit df1d9380fb

View File

@ -12,16 +12,26 @@
# See the License for the specific language governing permissions and # See the License for the specific language governing permissions and
# limitations under the License. # limitations under the License.
FROM python:3.7 ###############################################################
#
# Security vulnerability: curl piped to shell
#
# This code is currently not being run, and it is temporarily
# commented out until we can decide on a future for the
# "kubectl book". Sean Sullivan (seans3), 2021-07-27
#
###############################################################
EXPOSE 4000 # FROM python:3.7
RUN curl -sL https://deb.nodesource.com/setup_11.x | bash
RUN apt-get update && apt-get install -y nodejs npm && apt-get clean; # EXPOSE 4000
RUN npm install gitbook-cli -g # RUN curl -sL https://deb.nodesource.com/setup_11.x | bash
WORKDIR /opt/book/ # RUN apt-get update && apt-get install -y nodejs npm && apt-get clean;
COPY . /opt/book/ # RUN npm install gitbook-cli -g
RUN npm install
CMD ["gitbook", "serve"] # WORKDIR /opt/book/
# COPY . /opt/book/
# RUN npm install
# CMD ["gitbook", "serve"]