Update Python image version to 3.9.18

[WadeBarnes]

• Reduces the number of vulnerabilities in the image.

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[swcurran]

I noticed that Synk is saying this is making “no change detected” — as we are still using Bullseye Slim 3.9.16. Is there a Bullseye Slim 3.9.18 that we should also update to as part of this?

[dbluhm]

Slim-bookworm, perhaps?

[WadeBarnes]

I noticed that Synk is saying this is making “no change detected” — as we are still using Bullseye Slim 3.9.16. Is there a Bullseye Slim 3.9.18 that we should also update to as part of this?

The Synk scan for the PR is not scanning the docker file. I'm basing this change off the Synk scan that includes the dockerfiles.

[WadeBarnes]

Slim-bookworm, perhaps?

I recall that breaking things when we tried it, but I could try again.

[dbluhm]

Slim-bookworm, perhaps?

I recall that breaking things when we tried it, but I could try again.

I was mostly speculating on why the Snyk scan didn't report any changes. Your other comment explained that 🙂 Would be interesting to see if that change further resolved reported vulnerabilities and what breaks as a result but that doesn't seem like an urgent need right now.

[WadeBarnes]

Slim-bookworm, perhaps?

I recall that breaking things when we tried it, but I could try again.

On the surface building with slim-bookworm succeeds. However I think we should introduce this through the nightly tests as part of the matrix first to make sure there are no surprises. I'll enter a ticket for that.

[WadeBarnes]

Slim-bookworm, perhaps?

I recall that breaking things when we tried it, but I could try again.

I was mostly speculating on why the Snyk scan didn't report any changes. Your other comment explained that 🙂 Would be interesting to see if that change further resolved reported vulnerabilities and what breaks as a result but that doesn't seem like an urgent need right now.

Based on the report here, there's not too much of a difference; https://hub.docker.com/_/python/tags?page=1&name=3.9