ORT Docker File :: Security Vulnerability Identified

[porsche-rishisaxena]

Describe the bug

Docker Image of ORT stored in AWS ECR detected with security vulnerabilities

Expected behavior

Resolve or have minimal vulnerabilities to be compliant from security standpoint

Console / log output

Please find attached report
vulnerabilities.xlsx

Environment

Docker Image hosted on AWS ECR

[sschuberth]

Docker Image of ORT stored in AWS ECR detected with security vulnerabilities

Could you please share which tool was using to identify these vulnerabilities, for reference?

[porsche-rishisaxena]

@sschuberth AWS Inspector 2 is used for discovering security vulnerabilities. Please refer to this document: https://docs.aws.amazon.com/inspector/latest/user/what-is-inspector.html