Ensure 'yum install' has pinned version

Version pinning forces the build to retrieve a particular version regardless of what's in the cache. This technique can also reduce failures due to unanticipated changes in required packages.

Suggest Edits

Risk Level: medium
Platform: Docker
Spectral Rule ID: DOCKR065

REMEDIATION

Add pinned version for yum install.

FROM fedora:36
- RUN yum install httpd
+ RUN yum install httpd-2.4.54

https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#run

Updated about 1 year ago

REMEDIATION

Read more: