[local] Disable IPv6 and add CONFIG_KEYS to kernel

[zaymat]

No description provided.

[datadog-datadog-prod-us1]

⚪ Code Quality Violation

package make should have version pinned (...read more)

When using apt-get install, pin the version to avoid unwanted upgrades and undefined behavior.

    

[datadog-datadog-prod-us1]

⚪ Code Quality Violation

Suggested change

	RUN pip3 install awscli
	RUN pip3 install --no-cache-dir awscli

use --no-cache-dir to avoid caching (...read more)

This rule states that Dockerfiles should not use a cache when installing packages. When building Docker images, Docker has a built-in caching mechanism that reuses instructions from previous builds, which can speed up the build process. However, when installing packages, this can lead to outdated packages being used, which might have security vulnerabilities or bugs.

It is important to avoid using a cache when installing packages because it ensures that the latest version of a package is always used. This reduces the risk of security vulnerabilities and bugs, and ensures that your application has the most up-to-date and secure dependencies.

When installing packages with pip in a Dockerfile, use the --no-cache-dir option. This tells pip not to use a cache when installing packages, which ensures that the latest version of the package is always used. For example, instead of writing RUN pip install django, write RUN pip install --no-cache-dir django.

    

[datadog-datadog-prod-us1]

🟠 Code Vulnerability

last user should not be root (...read more)

Do not use root as the last user because your container runs with the root user. Always use a user with lower privileges.

    

[chagui]

Thanks 🙇