Add security flags to curl command in Dockerfile
Add --proto '=https' and --tlsv1.2 flags to prevent insecure HTTP redirects when downloading uv installer. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
Showing
1 changed file
with
1 additions
and
1 deletions
| @@ -39,7 +39,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ | @@ -39,7 +39,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ | ||
| 39 | && apt-get clean && rm -rf /var/lib/apt/lists/* | 39 | && apt-get clean && rm -rf /var/lib/apt/lists/* |
| 40 | 40 | ||
| 41 | # Install the latest uv release and expose it on PATH | 41 | # Install the latest uv release and expose it on PATH |
| 42 | -RUN curl -LsSf --retry 3 --retry-delay 2 https://astral.sh/uv/install.sh | sh | 42 | +RUN curl -LsSf --retry 3 --retry-delay 2 --proto '=https' --tlsv1.2 https://astral.sh/uv/install.sh | sh |
| 43 | 43 | ||
| 44 | WORKDIR /app | 44 | WORKDIR /app |
| 45 | 45 |
-
Please register or login to post a comment