Errors detected in .deepsource.toml.
Pin versions in
apt get install DOK-DL3008
Bug risk
Major
4 years ago
—
4 years old
Pin versions in apt get install. Instead of
apt-get install <package> use apt-get install <package>=<version> 8ENV LC_ALL en_US.UTF-8
9
10RUN apt-get -y update
11RUN apt-get -y install \12 curl \
13 g++ \
14 git-core \
Description
Version pinning forces the build to retrieve a particular version regardless of what’s in the cache. This technique can also reduce failures due to unanticipated changes between versions of dependencies.
You can read more about version pinning here
Bad Practice
FROM debian:buster
RUN apt-get install python
Recommended
FROM debian:buster
RUN apt-get install python=2.7