Run Using apt

  • Query id: a1bc27c6-7115-48d8-bf9d-5a7e836845ba
  • Query name: Run Using apt
  • Platform: Buildah
  • Severity: Low
  • Category: Supply-Chain
  • CWE: 1188
  • URL: Github

Description

apt is discouraged by the linux distributions as an unattended tool as its interface may suffer changes between versions. Better use the more stable apt-get and apt-cache
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - sh file
c=$(buildah from fedora)

buildah run ${c} apt install python3-setuptools -y

Code samples without security vulnerabilities

Negative test num. 1 - sh file
c=$(buildah from fedora)

buildah run ${c} apt-get install python3-setuptools -y