removing pip after install requirements per prisma results

USEPA · Aug 17, 2023 · 1560b01 · 1560b01
1 parent 8470345
commit 1560b01
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/docker/flask/Dockerfile b/docker/flask/Dockerfile
@@ -24,6 +24,11 @@ RUN chmod -R 755 /config && \
 
 WORKDIR /cyan_flask
 
+# Removes pip per Prisma scan CVE (still open as of 8/17/23):
+RUN rm -rf \
+	/usr/local/lib/python3.8/site-packages/pip \
+	/usr/local/bin/pip
+
 # Runs unit tests (needs secret file to run)
 # RUN python -m unittest