You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This enables HTML-to-PDF conversion but triggers Twistlock/Prisma Cloud security alerts due to packages pulled from the edge repository.
1576
+
<thstyle="font-size:14px"width="100px">Reason
1577
+
</th>
1578
+
<thstyle="font-size:14px">Using the Alpine Edge repository introduces packages that are not part of the stable release, which can trigger Twist lock security issues. To maintain security compliance, we should install Chromium from the stable repository.
The <b>edge</b> repository is rolling/testing and can introduce newer dependencies and CVEs flagged by enterprise scanners. Using edge also reduces build reproducibility across environments.
Install Chromium from the <b>stable Alpine repositories</b> (main/community) and include required runtime dependencies. This avoids the edge repo entirely and reduces security findings.
1594
-
<br/><br/>
1595
-
Use the following Dockerfile as a reference:
1596
-
<br/><br/>
1597
1580
1581
+
<tr>
1582
+
<thstyle="font-size:14px"width="100px">Solution
1583
+
</th>
1584
+
<td>You can install Chromium directly from the stable Alpine repository using the following command:
We have attached the modified docker file for your reference <ahref="https://www.syncfusion.com/downloads/support/directtrac/general/ze/Dockerfile">Docker file</a>.
0 commit comments