Skip to content

ROX-36081: remove curl, vim, python3 from scanner-db image - #3602

Open
janisz wants to merge 1 commit into
masterfrom
ROX-36081-remove-unused-pkgs
Open

ROX-36081: remove curl, vim, python3 from scanner-db image#3602
janisz wants to merge 1 commit into
masterfrom
ROX-36081-remove-unused-pkgs

Conversation

@janisz

@janisz janisz commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Expand rpm -e glob patterns to match curl-minimal/libcurl-minimal, vim-minimal, and python3 packages that are not needed at runtime and carry HIGH CVEs flagged in GovCloud compliance scans.

Mirrors the fix applied to central-db and scanner-v4-db in stackrox/stackrox#22269.

Partially generated by AI.

Expand rpm -e glob patterns to match curl-minimal/libcurl-minimal,
vim-minimal, and python3 packages that are not needed at runtime
and carry HIGH CVEs flagged in GovCloud compliance scans.

Mirrors the fix applied to central-db and scanner-v4-db in
stackrox/stackrox#22269.

Partially generated by AI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@janisz
janisz requested review from a team and rhacs-bot as code owners August 12, 2026 14:07
@rhacs-bot
rhacs-bot requested a review from a team August 12, 2026 14:07
@janisz janisz added the konflux-build Run Konflux in PR. Push commit to trigger it. label Aug 12, 2026
@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: d2b6bbcc-53d9-4f53-adf2-71c0e9594d75

📥 Commits

Reviewing files that changed from the base of the PR and between 6420612 and aa8c3e1.

📒 Files selected for processing (1)
  • image/db/rhel/konflux.Dockerfile

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Reduced the container image footprint by removing additional tools and package-management dependencies, including curl, Vim, and Python 3.

Walkthrough

The RHEL image cleanup command now removes additional curl, Vim, Python 3, and package-management dependencies.

Changes

RHEL package cleanup

Layer / File(s) Summary
Expand package cleanup
image/db/rhel/konflux.Dockerfile
The cleanup command removes additional curl, Vim, Python 3, RPM, DNF, libsolv, Hawkey, and YUM packages.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: rhacs-bot

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly identifies removal of curl, Vim, and Python 3 from the scanner-db image.
Description check ✅ Passed The description accurately explains the package-removal patterns, security rationale, and related prior fixes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch ROX-36081-remove-unused-pkgs

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

konflux-build Run Konflux in PR. Push commit to trigger it.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant