From 6ccb080fa8bf8c8c7517711214bfd40e028563bd Mon Sep 17 00:00:00 2001
From: Vince Grassia <593223+vgrassia@users.noreply.github.com>
Date: Thu, 30 Nov 2023 10:45:40 -0500
Subject: [PATCH] Docker - Apply fixes for Checkmarkx findings (#90)

---
 src/KeyConnector/Dockerfile | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/src/KeyConnector/Dockerfile b/src/KeyConnector/Dockerfile
index c64e15c..90ea7c8 100644
--- a/src/KeyConnector/Dockerfile
+++ b/src/KeyConnector/Dockerfile
@@ -4,10 +4,10 @@ LABEL com.bitwarden.product="bitwarden"
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends \
-        gosu \
-        curl \
-        libc-dev \
-        opensc \
+        gosu=1.12* \
+        curl=7.74.0* \
+        libc6-dev=2.31* \
+        opensc=0.21.0* \
     && rm -rf /var/lib/apt/lists/*
 
 # Install YubiHSM2 SDK
@@ -17,7 +17,8 @@ RUN curl -O https://developers.yubico.com/YubiHSM2/Releases/yubihsm2-sdk-2021-08
     && dpkg -i yubihsm2-sdk/libyubihsm-http1_*_amd64.deb \
     && dpkg -i yubihsm2-sdk/libyubihsm1_*_amd64.deb \
     && dpkg -i yubihsm2-sdk/yubihsm-pkcs11_*_amd64.deb \
-    && apt-get install -f
+    && apt-get install -y -f --no-install-recommends \
+    && rm -rf /var/lib/apt/lists/*
 
 ENV ASPNETCORE_URLS http://+:5000
 WORKDIR /app