Ensure no manual input in 'Zypper install'
-y flag in zypper install are Automatic yes to prompts. Assume "yes" as answer to all prompts and run non-interactively. If an undesirable situation, such as changing a held package or removing an essential package, occurs then zypper will abort.
Risk Level: medium
Platform: Docker
Spectral Rule ID: DOCKR030
REMEDIATION
use -y or --no-confirm flag in each use of zypper install
FROM busybox:1.0
- RUN zypper install httpd=2.4.46 && zypper clean
+ RUN zypper install -y httpd=2.4.46 && zypper clean
HEALTHCHECK CMD curl --fail http://localhost:3000 || exit 1
Read more:
Updated over 1 year ago