[Snyk] Security upgrade python from 3.7.5-buster to 3.10-buster

[msant262]

This PR was automatically created by Snyk using the credentials of a real user.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

• pygoat/Dockerfile

We recommend upgrading to python:3.10-buster, as this image has only 354 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity	Priority Score / 1000	Issue	Exploit Maturity
	714	Directory Traversal SNYK-DEBIAN10-DPKG-2847944	No Known Exploit
	714	Integer Overflow or Wraparound SNYK-DEBIAN10-GIT-3232718	No Known Exploit
	714	Integer Overflow or Wraparound SNYK-DEBIAN10-GIT-3232719	No Known Exploit
	714	CVE-2019-1353 SNYK-DEBIAN10-GIT-537156	No Known Exploit
	714	Out-of-bounds Write SNYK-DEBIAN10-IMAGEMAGICK-539706	No Known Exploit

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal

[msant262]

Checkmarx One – Scan Summary & Details – 4a3f6d88-948d-41fa-81b5-d50240759e5d

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Pip install Keeping Cached Packages	/Dockerfile: 9	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 20	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 23	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Unpinned Package Version in Pip Install	/Dockerfile: 23	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Unpinned Package Version in Pip Install	/Dockerfile: 20	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 9	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

Fixed Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5	When installing a package, its pin version should be defined
	Pip install Keeping Cached Packages	/Dockerfile: 9	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 23	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Pip install Keeping Cached Packages	/Dockerfile: 20	When installing packages with pip, the '--no-cache-dir' flag should be set to make Docker images smaller
	Unpinned Package Version in Pip Install	/Dockerfile: 20	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Unpinned Package Version in Pip Install	/Dockerfile: 23	Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Multiple RUN, ADD, COPY, Instructions Listed	/Dockerfile: 9	Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.