Run Using apt

  • Query id: b84a0b47-2e99-4c9f-8933-98bcabe2b94d
  • Query name: Run Using apt
  • Platform: Dockerfile
  • Severity: Low
  • Category: Supply-Chain
  • CWE: 758
  • URL: Github

Description

apt is discouraged by the linux distributions as an unattended tool as its interface may suffer changes between versions. Better use the more stable apt-get and apt-cache
Documentation

Code samples

Code samples with security vulnerabilities

Positive test num. 1 - dockerfile file
FROM busybox:1.0
RUN apt install curl
HEALTHCHECK CMD curl --fail http://localhost:3000 || exit 1

Code samples without security vulnerabilities

Negative test num. 1 - dockerfile file
FROM busybox:1.0
RUN apt-get install curl
HEALTHCHECK CMD curl --fail http://localhost:3000 || exit 1