jknappandClaude Opus 5.5
e223a3f64b
Build App / compute-version (push) Successful in 22s
Secret Scan / scan (push) Successful in 8s
Build App / build-macos (push) Successful in 3m14s
Build STT Container / build-stt-container (push) Successful in 4m12s
Build App / build-windows (push) Successful in 7m23s
Build App / build-linux (push) Successful in 7m29s
Build App / create-tag (push) Successful in 10s
Build App / sync-to-github (push) Successful in 10s
Build Container / build-container (push) Successful in 18m41s
npm/cargo/LiteLLM/STT/sandbox security updates; URL trailing punctuation, hard-wrapped /tmp file links, UTF-8 OSC 52 and copy cleanup; CI fixes for AppImage permissions, STT gha cache and needrestart. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
22 lines
808 B
Docker
22 lines
808 B
Docker
FROM python:3.11-slim
|
|
|
|
# The python:3.11 images freeze the pip and setuptools that shipped with that
|
|
# CPython branch (pip 24.0, setuptools 79), and both have since collected
|
|
# advisories: pip path traversal / tar-symlink / index-URL handling
|
|
# (CVE-2025-8869, CVE-2026-1703, CVE-2026-3219, CVE-2026-6357, CVE-2026-8643,
|
|
# CVE-2026-13346) and setuptools sdist/legacy-wheel path issues
|
|
# (CVE-2026-59890, GHSA-xmj3-9gf7-h52w). Upgrade them first, so the installs
|
|
# below also run under a patched pip.
|
|
RUN pip install --no-cache-dir --upgrade "pip>=26.2" "setuptools>=84.1" \
|
|
&& pip install --no-cache-dir \
|
|
faster-whisper \
|
|
fastapi \
|
|
uvicorn[standard] \
|
|
python-multipart
|
|
|
|
COPY server.py /app/server.py
|
|
|
|
EXPOSE 9876
|
|
|
|
CMD ["uvicorn", "app.server:app", "--host", "0.0.0.0", "--port", "9876"]
|