Remove vulnerable build tooling from runtime image

2026-09-15 18:03:38 +02:00
parent 62a02ba093
commit dd67eb7b23
1 changed files with 2 additions and 1 deletions
@@ -14,7 +14,8 @@ WORKDIR /app
 COPY requirements.txt .
 RUN apk upgrade --no-cache \
 && pip install --no-cache-dir -r requirements.txt \
- && pip install --no-cache-dir --upgrade 'setuptools>=83.0.0' 'msgpack>=1.2.1'
+ && pip uninstall -y pip setuptools msgpack \
+ && rm -rf /usr/local/lib/python3.13/ensurepip

 COPY app/ app/
 COPY resources/public/ resources/public/