chore(master): release 2.8.22 by lotyp · Pull Request #156 · wayofdev/docker-php-base

lotyp · 2025-06-19T11:36:12Z

🤖 I have created a release beep boop

2.8.22 (2025-06-19)

Dependencies

deps: update ansible/ansible-lint action to v25.6.1 (#155) (ac22e1c)

This PR was generated with Release Please. See documentation.

github-actions · 2025-06-19T11:37:20Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:1e8a12a9500b473e9be2bd888d03d6589a9aa35d8a511faa3a57a267db575518`
vulnerabilities
platform	linux/amd64
size	71 MB
packages	121

📦 Base Image php:8.3-fpm-alpine

also known as	`8.3-fpm-alpine3.22` `8.3.22-fpm-alpine` `8.3.22-fpm-alpine3.22`
digest	`sha256:2895cabe974eb03fbdb77aa019d52a5b6b18f745ac2837dea33603e8a2c10d88`
vulnerabilities

github-actions · 2025-06-19T11:37:21Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.3-fpm-alpine

Name	8.3.22-fpm-alpine3.22
Digest	sha256:2895cabe974eb03fbdb77aa019d52a5b6b18f745ac2837dea33603e8a2c10d88
Vulnerabilities
Pushed	1 week ago
Size	33 MB
Packages	61
Flavor	alpine
OS	3.22
Runtime	8.3.22

The base image is also available under the supported tag(s): 8.3-fpm-alpine3.22, 8.3.22-fpm-alpine, 8.3.22-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.4.8-fpm-alpine 8.4.8-fpm-alpine3.22 8.4-fpm-alpine3.22 8-fpm-alpine 8-fpm-alpine3.22 fpm-alpine fpm-alpine3.22	Benefits: Same OS detected Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22	1 week ago

github-actions · 2025-06-19T11:37:26Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:d0457532dec97ccc45464f1e08870ccdb927feecbe1dbb44b84172aeec936c75`
vulnerabilities
platform	linux/amd64
size	81 MB
packages	120

📦 Base Image php:8-alpine

also known as	`8-alpine3.22` `8-cli-alpine` `8-cli-alpine3.22` `8.4-alpine` `8.4-alpine3.22` `8.4-cli-alpine` `8.4-cli-alpine3.22` `8.4.8-alpine` `8.4.8-alpine3.22` `8.4.8-cli-alpine` `8.4.8-cli-alpine3.22` `alpine` `alpine3.22` `cli-alpine` `cli-alpine3.22`
digest	`sha256:8ae901385b46443dc59b7dea20c700dbc68e8d1e42d025c335029b09c35c33c2`
vulnerabilities

github-actions · 2025-06-19T11:37:26Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:ddb13d7b882f6d3ef1a015e140825518cbc10e1d5e52b89969382fe84fd220a0`
vulnerabilities
platform	linux/amd64
size	71 MB
packages	119

📦 Base Image php:42e8584bcaac5cccda08e770cb32513710f12eb6f8d76dd829150e72ac2bedf0

also known as	`8.1-fpm-alpine` `8.1-fpm-alpine3.21` `8.1.32-fpm-alpine` `8.1.32-fpm-alpine3.21`
digest	`sha256:e726fe8db6397574e12eb4f7be34f508443217f6396d7573b60e0b84db78c64e`
vulnerabilities

github-actions · 2025-06-19T11:37:28Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8-alpine

Name	8.4.8-alpine3.22
Digest	sha256:8ae901385b46443dc59b7dea20c700dbc68e8d1e42d025c335029b09c35c33c2
Vulnerabilities
Pushed	1 week ago
Size	42 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.4.8

The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.8-alpine, 8.4.8-alpine3.22, 8.4.8-cli-alpine, 8.4.8-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

github-actions · 2025-06-19T11:37:28Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.1-fpm-alpine

Name	8.1.32-fpm-alpine3.21
Digest	sha256:e726fe8db6397574e12eb4f7be34f508443217f6396d7573b60e0b84db78c64e
Vulnerabilities
Pushed	3 months ago
Size	32 MB
Packages	53
Flavor	alpine
OS	3.21
Runtime	8.1.32

The base image is also available under the supported tag(s): 8.1-fpm-alpine3.21, 8.1.32-fpm-alpine, 8.1.32-fpm-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed
`8.4-fpm-alpine3.21` Minor runtime version update Also known as:	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 2 Image contains equal number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.21 Runtime: 8.4	1 month ago
`8.3-fpm-alpine3.21` Minor runtime version update Also known as: 8.3.22-fpm-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.21 Runtime: 8.3.22	1 week ago
`8.2-fpm-alpine3.21` Minor runtime version update Also known as: 8.2.28-fpm-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 32 MB Flavor: alpine OS: 3.21 Runtime: 8.2.28	3 months ago
`8.1-fpm-alpine3.22` Patch runtime version update Also known as: 8.1.32-fpm-alpine3.22	Benefits: Patch runtime version update Same OS detected Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 32 MB Flavor: alpine OS: 3.22 Runtime: 8.1.32	1 week ago
`8.3-fpm-alpine` Minor runtime version update Also known as: 8.3.22-fpm-alpine 8.3.22-fpm-alpine3.22 8.3-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 33 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago
`8.2-fpm-alpine` Minor runtime version update Also known as: 8.2.28-fpm-alpine 8.2.28-fpm-alpine3.22 8.2-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.22 Runtime: 8.2.28	1 week ago
`8.4.8-fpm-alpine3.21` Image introduces no new vulnerability but removes 4 Also known as: 8-fpm-alpine3.21 fpm-alpine3.21	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image contains equal number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.21	1 week ago
`8.4-fpm-alpine` Image introduces no new vulnerability but removes 4 Also known as: 8.4.8-fpm-alpine 8.4.8-fpm-alpine3.22 8.4-fpm-alpine3.22 8-fpm-alpine 8-fpm-alpine3.22 fpm-alpine fpm-alpine3.22	Benefits: Same OS detected Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 37 MB Flavor: alpine OS: 3.22	1 week ago

github-actions · 2025-06-19T11:37:31Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:99ba4d9f35ece93cab850ab0a8c02762f5bd0094c74169679018872532a2838b`
vulnerabilities
platform	linux/amd64
size	93 MB
packages	139

📦 Base Image php:53a4f6c5bdf2c0213cb7293bc9da263feaa0ea41955f71bc1de2465f801efff9

also known as	`8.1-alpine` `8.1-alpine3.21` `8.1-cli-alpine` `8.1-cli-alpine3.21` `8.1.32-alpine` `8.1.32-alpine3.21` `8.1.32-cli-alpine` `8.1.32-cli-alpine3.21`
digest	`sha256:05dee9cd87b825cb096751fef4d1d017e3a1eb069af80cf63ea97c0923ecab4b`
vulnerabilities

setuptools 70.3.0 (pypi)

pkg:pypi/[email protected]

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range	`<78.1.1`
Fixed version	`78.1.1`
CVSS Score	`7.7`
CVSS Vector	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P`
EPSS Score	`0.120%`
EPSS Percentile	`32nd percentile`

Description

Summary

A path traversal vulnerability in PackageIndex was fixed in setuptools version 78.1.1

Details
    def _download_url(self, url, tmpdir):
        # Determine download filename
        #
        name, _fragment = egg_info_for_url(url)
        if name:
            while '..' in name:
                name = name.replace('..', '.').replace('\\', '_')
        else:
            name = "__downloaded__"  # default if URL has no path contents

        if name.endswith('.[egg.zip](http://egg.zip/)'):
            name = name[:-4]  # strip the extra .zip before download

 -->       filename = os.path.join(tmpdir, name)
Here: https://github.com/pypa/setuptools/blob/6ead555c5fb29bc57fe6105b1bffc163f56fd558/setuptools/package_index.py#L810C1-L825C88

os.path.join() discards the first argument tmpdir if the second begins with a slash or drive letter.
name is derived from a URL without sufficient sanitization. While there is some attempt to sanitize by replacing instances of '..' with '.', it is insufficient.

Risk Assessment

As easy_install and package_index are deprecated, the exploitation surface is reduced.
However, it seems this could be exploited in a similar fashion like GHSA-r9hx-vwmv-q579, and as described by POC 4 in GHSA-cx63-2mw6-8hw5 report: via malicious URLs present on the pages of a package index.

Impact

An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process running the Python code, which could escalate to RCE depending on the context.

References

https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5
pypa/setuptools#4946

github-actions · 2025-06-19T11:37:31Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:a0e778cc6f00f112b9fbd977445692305586ecba9b793fc48ec2cbf7cf217946`
vulnerabilities
platform	linux/amd64
size	94 MB
packages	158

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.22` `8.2-cli-alpine` `8.2-cli-alpine3.22` `8.2.28-alpine` `8.2.28-alpine3.22` `8.2.28-cli-alpine` `8.2.28-cli-alpine3.22`
digest	`sha256:2d7ae327714a2b6ff4041298d473a32b9bcce675db28030df735818ed68b1be7`
vulnerabilities

github-actions · 2025-06-19T11:37:33Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:60cc143f7d93d5e7fa1ebfafc41389eb9fe92a6fb1f8823738f907f8c4b5a91d`
vulnerabilities
platform	linux/amd64
size	75 MB
packages	121

📦 Base Image php:8-fpm-alpine

also known as	`8-fpm-alpine3.22` `8.4-fpm-alpine` `8.4-fpm-alpine3.22` `8.4.8-fpm-alpine` `8.4.8-fpm-alpine3.22` `fpm-alpine` `fpm-alpine3.22`
digest	`sha256:bc12bbfaf3d00edcc78c086423804b91071d64ee3c34511f0d8f5cea778f7daf`
vulnerabilities

github-actions · 2025-06-19T11:37:34Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.2-alpine

Name	8.2.28-alpine3.22
Digest	sha256:2d7ae327714a2b6ff4041298d473a32b9bcce675db28030df735818ed68b1be7
Vulnerabilities
Pushed	1 week ago
Size	36 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.2.28

The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.28-alpine, 8.2.28-alpine3.22, 8.2.28-cli-alpine, 8.2.28-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.8-cli-alpine 8.4.8-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.8-alpine 8.4.8-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.8	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.22-cli-alpine 8.3.22-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.22-alpine 8.3.22-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago

github-actions · 2025-06-19T11:37:34Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.1-alpine

Name	8.1.32-alpine3.21
Digest	sha256:05dee9cd87b825cb096751fef4d1d017e3a1eb069af80cf63ea97c0923ecab4b
Vulnerabilities
Pushed	3 months ago
Size	36 MB
Packages	52
Flavor	alpine
OS	3.21
Runtime	8.1.32

The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.32-alpine, 8.1.32-alpine3.21, 8.1.32-cli-alpine, 8.1.32-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed
`8.4-alpine3.21` Minor runtime version update Also known as: 8.4.8-cli-alpine3.21 8-cli-alpine3.21 cli-alpine3.21 alpine3.21 8-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.21 Runtime: 8.4	1 week ago
`8.3-alpine3.21` Minor runtime version update Also known as: 8.3.22-cli-alpine3.21 8.3-cli-alpine3.21 8.3.22-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.21 Runtime: 8.3.22	1 week ago
`8.2-alpine3.21` Minor runtime version update Also known as: 8.2.28-cli-alpine3.21 8.2-cli-alpine3.21 8.2.28-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.21 Runtime: 8.2.28	3 months ago
`8.1-alpine3.22` Patch runtime version update Also known as: 8.1.32-cli-alpine3.22 8.1-cli-alpine3.22 8.1.32-alpine3.22	Benefits: Patch runtime version update Same OS detected Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 36 MB Flavor: alpine OS: 3.22 Runtime: 8.1.32	1 week ago
`8.4-alpine` Minor runtime version update Also known as: 8.4.8-cli-alpine 8.4.8-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.8-alpine 8.4.8-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.8	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.22-cli-alpine 8.3.22-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.22-alpine 8.3.22-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.28-cli-alpine 8.2.28-cli-alpine3.22 8.2-cli-alpine 8.2-cli-alpine3.22 8.2.28-alpine 8.2.28-alpine3.22 8.2-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.22 Runtime: 8.2.28	1 week ago

github-actions · 2025-06-19T11:37:34Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:a630dd68bad65b36487a8544e4d2de3dbf659032a27153ea1c82711293b4c61a`
vulnerabilities
platform	linux/amd64
size	75 MB
packages	118

📦 Base Image php:53a4f6c5bdf2c0213cb7293bc9da263feaa0ea41955f71bc1de2465f801efff9

also known as	`8.1-alpine` `8.1-alpine3.21` `8.1-cli-alpine` `8.1-cli-alpine3.21` `8.1.32-alpine` `8.1.32-alpine3.21` `8.1.32-cli-alpine` `8.1.32-cli-alpine3.21`
digest	`sha256:05dee9cd87b825cb096751fef4d1d017e3a1eb069af80cf63ea97c0923ecab4b`
vulnerabilities

github-actions · 2025-06-19T11:37:36Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8-fpm-alpine

Name	fpm-alpine3.22
Digest	sha256:bc12bbfaf3d00edcc78c086423804b91071d64ee3c34511f0d8f5cea778f7daf
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	61
Flavor	alpine
OS	3.22

The base image is also available under the supported tag(s): 8-fpm-alpine3.22, 8.4-fpm-alpine, 8.4-fpm-alpine3.22, 8.4.8-fpm-alpine, 8.4.8-fpm-alpine3.22, fpm-alpine, fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed
`8.3-fpm-alpine` Minor runtime version update Also known as: 8.3.22-fpm-alpine 8.3.22-fpm-alpine3.22 8.3-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Image is smaller by 3.3 MB Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago
`8.2-fpm-alpine` Minor runtime version update Also known as: 8.2.28-fpm-alpine 8.2.28-fpm-alpine3.22 8.2-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Image is smaller by 4.0 MB Image has same number of vulnerabilities Image contains equal number of packages 8.2-fpm-alpine was pulled 4.1K times last month Image details: Size: 32 MB Flavor: alpine OS: 3.22 Runtime: 8.2.28	1 week ago
`8.1-fpm-alpine3.22` Minor runtime version update Also known as: 8.1.32-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Image is smaller by 4.5 MB Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 32 MB Flavor: alpine OS: 3.22 Runtime: 8.1.32	1 week ago

github-actions · 2025-06-19T11:37:37Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.1-alpine

Name	8.1.32-alpine3.21
Digest	sha256:05dee9cd87b825cb096751fef4d1d017e3a1eb069af80cf63ea97c0923ecab4b
Vulnerabilities
Pushed	3 months ago
Size	36 MB
Packages	52
Flavor	alpine
OS	3.21
Runtime	8.1.32

The base image is also available under the supported tag(s): 8.1-alpine3.21, 8.1-cli-alpine, 8.1-cli-alpine3.21, 8.1.32-alpine, 8.1.32-alpine3.21, 8.1.32-cli-alpine, 8.1.32-cli-alpine3.21

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed
`8.4-alpine3.21` Minor runtime version update Also known as: 8.4.8-cli-alpine3.21 8-cli-alpine3.21 cli-alpine3.21 alpine3.21 8-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.21 Runtime: 8.4	1 week ago
`8.3-alpine3.21` Minor runtime version update Also known as: 8.3.22-cli-alpine3.21 8.3-cli-alpine3.21 8.3.22-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.21 Runtime: 8.3.22	1 week ago
`8.2-alpine3.21` Minor runtime version update Also known as: 8.2.28-cli-alpine3.21 8.2-cli-alpine3.21 8.2.28-alpine3.21	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 36 MB Flavor: alpine OS: 3.21 Runtime: 8.2.28	3 months ago
`8.1-alpine3.22` Patch runtime version update Also known as: 8.1.32-cli-alpine3.22 8.1-cli-alpine3.22 8.1.32-alpine3.22	Benefits: Patch runtime version update Same OS detected Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 36 MB Flavor: alpine OS: 3.22 Runtime: 8.1.32	1 week ago
`8.4-alpine` Minor runtime version update Also known as: 8.4.8-cli-alpine 8.4.8-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.8-alpine 8.4.8-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.8	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.22-cli-alpine 8.3.22-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.22-alpine 8.3.22-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago
`8.2-alpine` Minor runtime version update Also known as: 8.2.28-cli-alpine 8.2.28-cli-alpine3.22 8.2-cli-alpine 8.2-cli-alpine3.22 8.2.28-alpine 8.2.28-alpine3.22 8.2-alpine3.22	Benefits: Same OS detected Minor runtime version update Tag was pushed more recently Image has similar size Image introduces no new vulnerability but removes 4 8.2-alpine was pulled 1.8K times last month Image details: Size: 36 MB Flavor: alpine OS: 3.22 Runtime: 8.2.28	1 week ago

github-actions · 2025-06-19T11:37:39Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:71e644b863541981f37215a25fc942a94c5666e104e1b76182ba9549d35cbe58`
vulnerabilities
platform	linux/amd64
size	76 MB
packages	120

📦 Base Image php:8.3-alpine

also known as	`8.3-alpine3.22` `8.3-cli-alpine` `8.3-cli-alpine3.22` `8.3.22-alpine` `8.3.22-alpine3.22` `8.3.22-cli-alpine` `8.3.22-cli-alpine3.22`
digest	`sha256:2891010783a71c4e3fe6af0dbf08e5d7e3eabe1055c69d6006d9bb0363ab7961`
vulnerabilities

github-actions · 2025-06-19T11:37:41Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:dc38536c02d3752db1908f27de0c3eaf9eedc59ab581b85e69725e0bc788139f`
vulnerabilities
platform	linux/amd64
size	75 MB
packages	120

📦 Base Image php:8.2-alpine

also known as	`8.2-alpine3.22` `8.2-cli-alpine` `8.2-cli-alpine3.22` `8.2.28-alpine` `8.2.28-alpine3.22` `8.2.28-cli-alpine` `8.2.28-cli-alpine3.22`
digest	`sha256:2d7ae327714a2b6ff4041298d473a32b9bcce675db28030df735818ed68b1be7`
vulnerabilities

github-actions · 2025-06-19T11:37:42Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.3-alpine

Name	8.3.22-alpine3.22
Digest	sha256:2891010783a71c4e3fe6af0dbf08e5d7e3eabe1055c69d6006d9bb0363ab7961
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.3.22

The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.22-alpine, 8.3.22-alpine3.22, 8.3.22-cli-alpine, 8.3.22-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.8-cli-alpine 8.4.8-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.8-alpine 8.4.8-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.8	1 week ago

github-actions · 2025-06-19T11:37:43Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:a3638b19148e5acfd654ad5d7d9c7faf3132f07d8b855fbedf649961a22199c0`
vulnerabilities
platform	linux/amd64
size	95 MB
packages	158

📦 Base Image php:8.3-alpine

also known as	`8.3-alpine3.22` `8.3-cli-alpine` `8.3-cli-alpine3.22` `8.3.22-alpine` `8.3.22-alpine3.22` `8.3.22-cli-alpine` `8.3.22-cli-alpine3.22`
digest	`sha256:2891010783a71c4e3fe6af0dbf08e5d7e3eabe1055c69d6006d9bb0363ab7961`
vulnerabilities

github-actions · 2025-06-19T11:37:44Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.2-alpine

Name	8.2.28-alpine3.22
Digest	sha256:2d7ae327714a2b6ff4041298d473a32b9bcce675db28030df735818ed68b1be7
Vulnerabilities
Pushed	1 week ago
Size	36 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.2.28

The base image is also available under the supported tag(s): 8.2-alpine3.22, 8.2-cli-alpine, 8.2-cli-alpine3.22, 8.2.28-alpine, 8.2.28-alpine3.22, 8.2.28-cli-alpine, 8.2.28-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.8-cli-alpine 8.4.8-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.8-alpine 8.4.8-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.8	1 week ago
`8.3-alpine` Minor runtime version update Also known as: 8.3.22-cli-alpine 8.3.22-cli-alpine3.22 8.3-cli-alpine 8.3-cli-alpine3.22 8.3.22-alpine 8.3.22-alpine3.22 8.3-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago

github-actions · 2025-06-19T11:37:45Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.3-alpine

Name	8.3.22-alpine3.22
Digest	sha256:2891010783a71c4e3fe6af0dbf08e5d7e3eabe1055c69d6006d9bb0363ab7961
Vulnerabilities
Pushed	1 week ago
Size	37 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.3.22

The base image is also available under the supported tag(s): 8.3-alpine3.22, 8.3-cli-alpine, 8.3-cli-alpine3.22, 8.3.22-alpine, 8.3.22-alpine3.22, 8.3.22-cli-alpine, 8.3.22-cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.4-alpine` Minor runtime version update Also known as: 8.4.8-cli-alpine 8.4.8-cli-alpine3.22 8.4-cli-alpine 8.4-cli-alpine3.22 8-cli-alpine 8-cli-alpine3.22 cli-alpine cli-alpine3.22 alpine alpine3.22 8.4.8-alpine 8.4.8-alpine3.22 8.4-alpine3.22 8-alpine 8-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 42 MB Flavor: alpine OS: 3.22 Runtime: 8.4.8	1 week ago

github-actions · 2025-06-19T11:37:50Z

Outdated

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:7c26e82ba8bbc95a496af00eb8c322441c3d1da9ed9a4fba08e1d69cb2210ee5`
vulnerabilities
platform	linux/amd64
size	70 MB
packages	121

📦 Base Image php:8.2-fpm-alpine

also known as	`8.2-fpm-alpine3.22` `8.2.28-fpm-alpine` `8.2.28-fpm-alpine3.22`
digest	`sha256:1a30bfabe4c99f09227f38c8821d19f6e16702a81ceda26c0d8c929086ed4fb7`
vulnerabilities

github-actions · 2025-06-19T11:37:53Z

Outdated

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8.2-fpm-alpine

Name	8.2.28-fpm-alpine3.22
Digest	sha256:1a30bfabe4c99f09227f38c8821d19f6e16702a81ceda26c0d8c929086ed4fb7
Vulnerabilities
Pushed	1 week ago
Size	32 MB
Packages	61
Flavor	alpine
OS	3.22
Runtime	8.2.28

The base image is also available under the supported tag(s): 8.2-fpm-alpine3.22, 8.2.28-fpm-alpine, 8.2.28-fpm-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

Tag	Details	Pushed	Vulnerabilities
`8.3-fpm-alpine` Minor runtime version update Also known as: 8.3.22-fpm-alpine 8.3.22-fpm-alpine3.22 8.3-fpm-alpine3.22	Benefits: Same OS detected Minor runtime version update Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 33 MB Flavor: alpine OS: 3.22 Runtime: 8.3.22	1 week ago
`8.4-fpm-alpine` Image has same number of vulnerabilities Also known as: 8.4.8-fpm-alpine 8.4.8-fpm-alpine3.22 8.4-fpm-alpine3.22 8-fpm-alpine 8-fpm-alpine3.22 fpm-alpine fpm-alpine3.22	Benefits: Same OS detected Image has similar size Image has same number of vulnerabilities Image contains equal number of packages Image details: Size: 37 MB Flavor: alpine OS: 3.22	1 week ago

github-actions · 2025-06-19T11:37:54Z

🔍 Vulnerabilities of `wayofdev/php-base:latest`

📦 Image Reference wayofdev/php-base:latest

digest	`sha256:039abcbb303eb560e1c346415685dd161cec0bc5c4c16b3ccba36c3f781bbc8f`
vulnerabilities
platform	linux/amd64
size	100 MB
packages	158

📦 Base Image php:8-alpine

also known as	`8-alpine3.22` `8-cli-alpine` `8-cli-alpine3.22` `8.4-alpine` `8.4-alpine3.22` `8.4-cli-alpine` `8.4-cli-alpine3.22` `8.4.8-alpine` `8.4.8-alpine3.22` `8.4.8-cli-alpine` `8.4.8-cli-alpine3.22` `alpine` `alpine3.22` `cli-alpine` `cli-alpine3.22`
digest	`sha256:8ae901385b46443dc59b7dea20c700dbc68e8d1e42d025c335029b09c35c33c2`
vulnerabilities

github-actions · 2025-06-19T11:37:57Z

Recommended fixes for image `wayofdev/php-base:latest`

Base image is php:8-alpine

Name	8.4.8-alpine3.22
Digest	sha256:8ae901385b46443dc59b7dea20c700dbc68e8d1e42d025c335029b09c35c33c2
Vulnerabilities
Pushed	1 week ago
Size	42 MB
Packages	60
Flavor	alpine
OS	3.22
Runtime	8.4.8

The base image is also available under the supported tag(s): 8-alpine3.22, 8-cli-alpine, 8-cli-alpine3.22, 8.4-alpine, 8.4-alpine3.22, 8.4-cli-alpine, 8.4-cli-alpine3.22, 8.4.8-alpine, 8.4.8-alpine3.22, 8.4.8-cli-alpine, 8.4.8-cli-alpine3.22, alpine, alpine3.22, cli-alpine, cli-alpine3.22

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.

✅ This image version is up to date.

Change base image

✅ There are no tag recommendations at this time.

lotyp · 2025-06-19T11:38:29Z

🤖 Created releases:

v2.8.22

🌻

chore(master): release 2.8.22

af6e5b9

lotyp added the autorelease: pending label Jun 19, 2025

lotyp enabled auto-merge June 19, 2025 11:36

way-finder-bot self-requested a review June 19, 2025 11:38

way-finder-bot self-assigned this Jun 19, 2025

way-finder-bot approved these changes Jun 19, 2025

View reviewed changes

lotyp merged commit ed42d48 into master Jun 19, 2025
19 of 20 checks passed

lotyp deleted the release-please--branches--master--components--docker-php-base branch June 19, 2025 11:38

lotyp added autorelease: tagged and removed autorelease: pending labels Jun 19, 2025

Uh oh!

Comments

Conversation

lotyp commented Jun 19, 2025

🤖 I have created a release beep boop

2.8.22 (2025-06-19)

Dependencies

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Summary

Details

Risk Assessment

Impact

References

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🔍 Vulnerabilities of wayofdev/php-base:latest

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

Refresh base image

Change base image

Uh oh!

github-actions bot commented Jun 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Recommended fixes for image wayofdev/php-base:latest

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

🔍 Vulnerabilities of `wayofdev/php-base:latest`

github-actions bot commented Jun 19, 2025 •

edited

Loading

Recommended fixes for image `wayofdev/php-base:latest`

🔍 Vulnerabilities of `wayofdev/php-base:latest`

Recommended fixes for image `wayofdev/php-base:latest`