From dd67eb7b23a3e0d85032251ea0068443c9e43cd9 Mon Sep 17 00:00:00 2001
From: Per Magnus Petersen <magnus@pmagnus.dk>
Date: Tue, 15 Sep 2026 18:03:38 +0200
Subject: [PATCH] Remove vulnerable build tooling from runtime image

---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 35a3376..b794e5b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,8 @@ WORKDIR /app
 COPY requirements.txt .
 RUN apk upgrade --no-cache \
  && pip install --no-cache-dir -r requirements.txt \
- && pip install --no-cache-dir --upgrade 'setuptools>=83.0.0' 'msgpack>=1.2.1'
+ && pip uninstall -y pip setuptools msgpack \
+ && rm -rf /usr/local/lib/python3.13/ensurepip
 
 COPY app/ app/
 COPY resources/public/ resources/public/