Trivy scanning of dotnet-sdk 8.0

[AshwinSridharan0410]

Hi. My requirement is to install dotnet-sdk 8.0 in my docker image through Dockerfile. After building it , when I use trivy to scan the image, I get the following errors:-

Command used:- trivy image --severity HIGH,CRITICAL --ignore-unfixed image_name

Dockerfile
FROM polarisci-tempered-docker-virtual.jfrog-prod.debsreplatform.cloud/base/dependencies/stable:2.0.2
RUN apt-get update && apt-get install -y dotnet-sdk-8.0

[dotnet-issue-labeler]

I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.

[baronfel]

That's a pretty old SDK image - can you use a newer version of the SDK image (may need to re-pull to refresh the image) and check again? We've done work here recently to clean up all of these false positives from Trivy and other scanning tools.

[AshwinSridharan0410]

Thanks @baronfel . Will look up to it