Commit ba6c464
authored
[BUZZOK-27808] PDIE Genai agents: Use system pip (#1696)
This drops the uv pip install, preferring to rely on the system installed pip
and uv. This is currently to address CVE-2025-8869, which upstream pip has
fixed but has not released yet, and its release date is undetermined at this
time.
Chainguard however has fixed this in their images, so pip installing from pypi
is re-introducing the vulnerability into our images. Relying on system pip
allows us to use the fixes from Chainguard.1 parent 0fa97d6 commit ba6c464
File tree
2 files changed
+2
-2
lines changed- public_dropin_environments/python311_genai_agents
2 files changed
+2
-2
lines changedLines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
48 | 48 | | |
49 | 49 | | |
50 | 50 | | |
51 | | - | |
| 51 | + | |
52 | 52 | | |
53 | 53 | | |
54 | 54 | | |
| |||
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
88 | 88 | | |
89 | 89 | | |
90 | 90 | | |
91 | | - | |
| 91 | + | |
92 | 92 | | |
93 | 93 | | |
94 | 94 | | |
| |||
0 commit comments