Pathfinder scanned this open-source repository. Scan your own repos free →
← Back to scan results
shivasurya/code-pathfinder

high Missing Image Version

extension/secureflow/packages/secureflow-cli/Dockerfile:2

FROM instruction uses 'latest' tag or no tag. Specify explicit versions for reproducible builds.

CWE-1188 open

Code

extension/secureflow/packages/secureflow-cli/Dockerfile
1# Use official Node.js slim image for smaller size and better security
2FROM node:18-slim
3
4# Install system dependencies needed for SecureFlow CLI
5RUN apt-get update && apt-get install -y \

Seen on 8 scans

Get this for your repo.

Pathfinder runs the same scan on your own repos free. Connect via GitHub in 30 seconds.

Get started View the open-source rules →