ruby icon indicating copy to clipboard operation
ruby copied to clipboard

verified publisher icon docker-library
→

Metadata

Docker Official Image packaging for Ruby

Results 11 ruby issues
Sort by recently updated
recently updated
newest added

GEM_HOME is world writable without enough documentation or info

1 comment

GEM_HOME is set to `/usr/local/bundle` and made world [sticky + writable](https://github.com/docker-library/ruby/blob/235b3ffb2060c837137b32ea55f75816f2f4e4c4/3.4/slim-bookworm/Dockerfile#L132). This could introduce several supply-chain-related vulnerabilities and are usually harder to detect, since most scanning tools, including SBOM tools,...

prabhu avatar prabhu

← Metadata

498
Stars
332
Forks
Watchers

Owner

verified publisher icon docker-library

Metadata

Docker Official Image packaging for Ruby

Back