@@ -75,7 +75,7 @@ ARG IMAGE_CREATED
7575
7676# Open Container Initiative (OCI) metadata labels
7777LABEL org.opencontainers.image.source=https://github.com/guacsec/trustify-da-javascript-client
78- LABEL org.opencontainers.image.description="Trustify Dependency Analytics JavaScript Client - Container image for dependency analysis and vulnerability scanning supporting Maven, NPM, Golang, Gradle, Pnpm, Yarn, and Python ecosystems"
78+ LABEL org.opencontainers.image.description="Trustify Dependency Analytics JavaScript Client - Container image for dependency analysis and vulnerability scanning supporting Maven, NPM, Golang, Gradle, Pnpm and Yarn ecosystems"
7979LABEL org.opencontainers.image.licenses=Apache-2.0
8080LABEL org.opencontainers.image.title="Trustify Dependency Analytics JavaScript Client"
8181LABEL org.opencontainers.image.vendor="guacsec"
@@ -89,8 +89,6 @@ LABEL org.opencontainers.image.created="${IMAGE_CREATED}"
8989ENV TRUSTIFY_DA_PIP_FREEZE=''
9090# contains pip show data for all packages, base64 encoded
9191ENV TRUSTIFY_DA_PIP_SHOW=''
92- # indicate whether to use the virtual environment for python packages
93- ENV TRUSTIFY_DA_PYTHON_VIRTUAL_ENV='true'
9492
9593# Copy OpenJDK (Temurin) from the builder stage
9694COPY --from=builder /usr/temurin-21/ /usr/temurin-21/
@@ -112,11 +110,9 @@ ENV GRADLE_HOME=/usr/gradle-9.2.1
112110COPY --from=builder /usr/local/corepack/ /usr/local/corepack/
113111ENV COREPACK_HOME=/usr/local/corepack/cache
114112
115- # Install Python via microdnf, create yarn wrapper scripts, and fix permissions
113+ # Create yarn wrapper scripts, and fix permissions
116114USER root
117- RUN microdnf install -y python3 python3-pip \
118- && microdnf clean all \
119- && chown -R 1001:0 /usr/local/corepack/cache \
115+ RUN chown -R 1001:0 /usr/local/corepack/cache \
120116 && chmod -R g+rwX /usr/local/corepack/cache \
121117 && printf '#!/bin/sh\n exec corepack yarn@1.22.22 "$@"\n ' > /usr/local/bin/yarn-classic \
122118 && printf '#!/bin/sh\n exec corepack yarn@4.9.1 "$@"\n ' > /usr/local/bin/yarn-berry \
0 commit comments