build: fix CVE-2022-40897 (#7080)

This commit is contained in:
Tobias Wochinger 2024-02-23 16:58:39 +01:00 committed by GitHub
parent f5645a4454
commit 79b32cd755
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -19,7 +19,9 @@ WORKDIR /opt/haystack
RUN python3 -m venv --system-site-packages /opt/venv
ENV PATH="/opt/venv/bin:$PATH"
# Upgrade setuptools due to https://nvd.nist.gov/vuln/detail/CVE-2022-40897
RUN pip install --upgrade pip && \
pip install --no-cache-dir -U setuptools && \
pip install --no-cache-dir .
FROM $base_image AS final