You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The Dockerfile does not check the hash of the GeoIP deb package.
This can be a vector of attack in a supply chain attack.
The Dockerfile should add a step to check the SHA-256 checksum of this package before installing it.