Hi @Sofia Pacifico WireMock doesn't use SQLite at all so from that perspective you're safe.
I'm surprised to see that SQLite is even present in the image though. Do you mind sharing your scan report and the details of the tool you used to obtain it?
01/20/2023, 3:41 PM
Hi @Tom, my apologies for the delay and thanks a lot for your quick response. Below you will find an screenshot of the vulnerabilities shown by the AWS ECR scan vulnerabilities tool (if you need more details, don't hesitate to let me know) I just upload to a private repo the wiremock docker images, none of them is high or critical, I just wanted to check with you if there is something we can do to avoid this or we just can ignore this report. In advance, thanks a lot for your help with this.
01/23/2023, 11:57 AM
Thanks for sharing this @Sofia Pacifico, I’ll see if there’s a way we can strip out more of the unnecessary libraries.
One more question - were you using one of the Alpine builds or Debian?
01/23/2023, 3:09 PM
@Tom I am using Debian build. Thank you very much for your help here :)!
Hi @Tom! I just wanted to keep you updated. I tested with alpine build and I was not able to see any vulnerability! "Initial scan has been completed and image is continuously being scanned for new vulnerabilities. No vulnerabilities are currently found." 🙂
01/24/2023, 3:38 PM
Thanks for the update. Glad to hear there’s a vuln free option at the moment.