Pathfinder scanned this open-source repository. Scan your own repos free →
← Back to scan results
shivasurya/code-pathfinder

high Missing Image Version

Dockerfile:21

FROM instruction uses 'latest' tag or no tag. Specify explicit versions for reproducible builds.

CWE-1188 open

Code

Dockerfile
18
19RUN go build -ldflags="-s -w -X github.com/shivasurya/code-pathfinder/sast-engine/cmd.Version=${PROJECT_VERSION} -X github.com/shivasurya/code-pathfinder/sast-engine/cmd.GitCommit=${PROJECT_COMMIT} -X github.com/shivasurya/code-pathfinder/sast-engine/analytics.PublicKey=${POSTHOG_API_KEY}" -v -o pathfinder .
20
21FROM cgr.dev/chainguard/wolfi-base:latest
22
23WORKDIR /app
24

Seen on 8 scans

Get this for your repo.

Pathfinder runs the same scan on your own repos free. Connect via GitHub in 30 seconds.

Get started View the open-source rules →