[Snyk] Security upgrade alpine from 3.12 to 3.21.0

[idanbe4]

Snyk has created this PR to fix 1 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to alpine:3.21.0, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-ALPINE312-ZLIB-2977082	714

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[dryrunsecurity]

DryRun Security Summary

The code change involves updating the base image in a Dockerfile from Alpine Linux 3.12 to 3.21.0, which is a routine version upgrade that may provide security updates and does not raise significant security concerns.

Expand for full summary

Summary:

The provided code change is for a Dockerfile, which is a file used to build Docker images. The primary change is an update to the base image from alpine:3.12 to alpine:3.21.0, which is likely a version upgrade to the Alpine Linux distribution. From an application security perspective, this change is not particularly concerning, as upgrading the base image to a newer version is generally a good practice, as it can provide security updates and bug fixes. However, it's important to review the release notes for the new Alpine version to ensure that there are no known security vulnerabilities or breaking changes that could impact the application.

The other changes in the Dockerfile are related to the metadata labels, which provide information about the image, such as the version, author, and example usage commands. These changes do not have any direct impact on the application security of the image. Overall, this code change appears to be a routine update to the base image and metadata, and there are no obvious security concerns based on the provided information.

Files Changed:

• Dockerfile: The base image has been updated from alpine:3.12 to alpine:3.21.0, which is likely a version upgrade to the Alpine Linux distribution. The other changes in the Dockerfile are related to the metadata labels, which provide information about the image, such as the version, author, and example usage commands.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.