From aa5231b41972cb7de27bd6744b35c5fb4252e547 Mon Sep 17 00:00:00 2001
From: Christoph Ostarek <christoph@zededa.com>
Date: Tue, 10 Sep 2024 12:48:35 +0200
Subject: [PATCH] Dockerfile: unpin ca-certificates version

this is just unnecessary and insecure
actually you want to use the newest version of ca-certificates
as it might have excluded CAs that lost their private keys

Signed-off-by: Christoph Ostarek <christoph@zededa.com>
---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index efdd8c8..44511e5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,8 @@ RUN make tools OUTDIR=/usr/local/bin
 
 # Deploy the application binaries into a lean image
 FROM alpine:3.20
-RUN apk --no-cache add ca-certificates=20240226-r0 \
+# hadolint ignore=DL3018
+RUN apk --no-cache add ca-certificates \
   && update-ca-certificates
 
 COPY --from=builder /usr/local/bin/* /usr/local/bin/