API image scanAPI image scan
You
Scan the latest API image for vulnerabilities.
Assistant
Container image scan for api:8f3c1d2:
- Critical: 0. High: 2, both in
opensslfrom the base image. - Bumping to
node:22.11-slimclears both.
You
Which CVEs are the two highs?
Assistant
The two highs are both openssl:
| CVE | Installed | Fixed |
|---|---|---|
| CVE-2026-2201 | 3.0.13 | 3.0.15 |
| CVE-2026-2417 | 3.0.13 | 3.0.15 |
You
Rebuild on the newer base and scan again.
Assistant
Rebuilt on node:22.11-slim: 0 critical and 0 high. Image size is 4 MB smaller.
You
Open a PR with the base image bump.
Assistant
Opened PR #772 that bumps the Dockerfile base image. The integration suite passes on the new image.