Hi @Sofia Pacifico WireMock doesn't use SQLite at all so from that perspective you're safe. I'm surprised to see that SQLite is even present in the image though. Do you mind sharing your scan report and the details of the tool you used to obtain it?

Hi @Tom, my apologies for the delay and thanks a lot for your quick response. Below you will find an screenshot of the vulnerabilities shown by the AWS ECR scan vulnerabilities tool (if you need more details, don't hesitate to let me know) I just upload to a private repo the wiremock docker images, none of them is high or critical, I just wanted to check with you if there is something we can do to avoid this or we just can ignore this report. In advance, thanks a lot for your help with this.

Thanks for sharing this @Sofia Pacifico, I’ll see if there’s a way we can strip out more of the unnecessary libraries. One more question - were you using one of the Alpine builds or Debian?

@Tom I am using Debian build. Thank you very much for your help here :)!

Thanks for the update. Glad to hear there’s a vuln free option at the moment.