fix: migrate canary base image from openjdk to amazoncorretto

Sam Evanuk · Sam Evanuk · commit d165f2ec0851 · 2026-02-20T11:23:06.000-08:00
openjdk:11-jdk-slim was deprecated by Docker Hub in 2022 and is based
on Debian Buster (EOL), resulting in critical unpatched CVEs.

Migrate to amazoncorretto:11 which is actively maintained by Amazon
and receives regular security patches.
diff --git a/canarytests/agent/Dockerfile b/canarytests/agent/Dockerfile
@@ -1,4 +1,4 @@
-FROM openjdk:11-jdk-slim
+FROM amazoncorretto:11
 RUN mkdir /app
 COPY build/libs/*.jar /app/agent.jar
 ENV JAVA_OPTS=""

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM openjdk:11-jdk-slim`
	`1`	`+FROM amazoncorretto:11`
`2`	`2`	`RUN mkdir /app`
`3`	`3`	`COPY build/libs/*.jar /app/agent.jar`
`4`	`4`	`ENV JAVA_OPTS=""`