fix vulns (#69)

* fix vulns, revert git-lfs, set strict git-lfs version

Author: pysarenko-bohdan

Dockerfile

@@ -1,23 +1,15 @@
-#moving to ubuntu instead of debian to solve high vulnerabilities 
-FROM ubuntu:jammy-20230816
+#moving to ubuntu instead of debian to solve high vulnerabilities
+FROM ubuntu:jammy-20231004
 
 RUN apt-get update && \
   apt-get install -y curl bash openssl git && \
   apt-get clean
 
-ARG GIT_LFS_VERSION=3.4.0
-ARG TARGETPLATFORM
-
-# installing git-lfs
-RUN case ${TARGETPLATFORM} in \
-   "linux/amd64")  OS_ARCH=amd64  ;; \
-   "linux/arm64")  OS_ARCH=arm64  ;; \
-    esac \
-    && curl -sL https://github.com/git-lfs/git-lfs/releases/download/v${GIT_LFS_VERSION}/git-lfs-linux-${OS_ARCH}-v${GIT_LFS_VERSION}.tar.gz -o "git-lfs.tar.gz" && \
-    tar -xvzf "git-lfs.tar.gz" && \
-    chmod +x git-lfs-${GIT_LFS_VERSION}/install.sh && \
-    rm git-lfs.tar.gz && \
-    git-lfs-${GIT_LFS_VERSION}/install.sh
+# git-lfs v3.4.0 - last available at the 23.10.2023 and it contains bug. Don't update to the version 3.4.0 !!!
+# https://codefresh-io.atlassian.net/browse/CR-20633
+# Next preferred version must be >=3.4.1 and should be tested
+RUN apt-get install git-lfs=3.0.2-1 && \
+ git lfs install
 
 #installing busybox
 ARG BUSYBOX_VERSION=1.31.0

service.yaml

@@ -1 +1 @@
-version: 10.1.23
+version: 10.1.24