[solr-operator] branch main updated: Change base image of Solr Operator to distroless/static (#295)

[ho...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

houston pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr-operator.git


The following commit(s) were added to refs/heads/main by this push:
     new e23ff0a  Change base image of Solr Operator to distroless/static (#295)
e23ff0a is described below

commit e23ff0ac982b3572897333f796fdd367c3d404b7
Author: Houston Putman <ho...@apache.org>
AuthorDate: Wed Jul 21 14:09:20 2021 -0400

    Change base image of Solr Operator to distroless/static (#295)
---
 build/Dockerfile              | 2 +-
 helm/solr-operator/Chart.yaml | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/build/Dockerfile b/build/Dockerfile
index d80b746..bf93b73 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -57,7 +57,7 @@ RUN CGO_ENABLED=0 GIT_SHA="${GIT_SHA}" make fetch-licenses-full build
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 # Debug is needed, so that the license files are viewable.
 # If there is another way to view these files, we can remove "debug-".
-FROM gcr.io/distroless/base:debug-nonroot
+FROM gcr.io/distroless/static:debug-nonroot
 
 WORKDIR /
 COPY --from=builder workspace/bin/solr-operator .
diff --git a/helm/solr-operator/Chart.yaml b/helm/solr-operator/Chart.yaml
index 2129523..9d61acd 100644
--- a/helm/solr-operator/Chart.yaml
+++ b/helm/solr-operator/Chart.yaml
@@ -91,6 +91,13 @@ annotations:
           url: https://github.com/apache/solr-operator/issues/259
         - name: Github PR
           url: https://github.com/apache/solr-operator/pull/284
+    - kind: security
+      description: Changed Solr Operator base Docker image to reduce vulnerabilities.
+      links:
+        - name: Github Issue
+          url: https://github.com/apache/solr-operator/issues/294
+        - name: Github PR
+          url: https://github.com/apache/solr-operator/pull/295
   artifacthub.io/images: |
     - name: solr-operator
       image: apache/solr-operator:v0.4.0-prerelease