Security Report - eizen-linkedin-service

🔴 Vulnerabilities (0)
Severity	CVE ID	Package	Installed	Fixed In	Description
✅ No vulnerabilities found
🔑 Secrets (0)
Type	File	Line	Match
✅ No secrets found
⚙️ Misconfigurations (1)
Severity	ID	Check	File	Message
HIGH	DS-0029	'apt-get' missing '--no-install-recommends'	Dockerfile	'--no-install-recommends' flag is missed: 'apt-get update && apt-get install -y ffmpeg && rm
📄 Raw JSON Report (click to expand)
{
  "SchemaVersion": 2,
  "Trivy": {
    "Version": "0.69.0"
  },
  "ReportID": "019cfa6d-e2ef-7244-ad76-2fe6f6801379",
  "CreatedAt": "2026-03-17T06:13:51.471155082Z",
  "ArtifactID": "sha256:fbbdd268c6124bb3e54bca52b6f86b138f6249e2fe6dfc8deb5601d465a995d3",
  "ArtifactName": "/src",
  "ArtifactType": "repository",
  "Metadata": {
    "RepoURL": "https://github.com/eizen-ai/eizen-linkedin-service.git",
    "Branch": "code-refactor-v1",
    "Commit": "8cddc25689f7523b54a156558a285fcc18f8cab2",
    "CommitMsg": "pyarmor_testing",
    "Author": "eizen-prasad <prasad.ayithireddi@eizen.ai>",
    "Committer": "eizen-prasad <prasad.ayithireddi@eizen.ai>"
  },
  "Results": [
    {
      "Target": "requirements.txt",
      "Class": "lang-pkgs",
      "Type": "pip",
      "Packages": [
        {
          "Name": "Jinja2",
          "Identifier": {
            "PURL": "pkg:pypi/jinja2@3.1.6",
            "UID": "53f847472bad5efc"
          },
          "Version": "3.1.6",
          "Locations": [
            {
              "StartLine": 11,
              "EndLine": 11
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "boto3",
          "Identifier": {
            "PURL": "pkg:pypi/boto3@1.42.67",
            "UID": "38f2af9d89180b15"
          },
          "Version": "1.42.67",
          "Locations": [
            {
              "StartLine": 14,
              "EndLine": 14
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "fastapi",
          "Identifier": {
            "PURL": "pkg:pypi/fastapi@0.135.1",
            "UID": "f9fcc5abebbfb30"
          },
          "Version": "0.135.1",
          "Locations": [
            {
              "StartLine": 2,
              "EndLine": 2
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "h11",
          "Identifier": {
            "PURL": "pkg:pypi/h11@0.16.0",
            "UID": "8f1b32c085b72673"
          },
          "Version": "0.16.0",
          "Locations": [
            {
              "StartLine": 10,
              "EndLine": 10
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "httpx",
          "Identifier": {
            "PURL": "pkg:pypi/httpx@0.28.1",
            "UID": "3eda393f775ab9a"
          },
          "Version": "0.28.1",
          "Locations": [
            {
              "StartLine": 4,
              "EndLine": 4
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "loguru",
          "Identifier": {
            "PURL": "pkg:pypi/loguru@0.7.3",
            "UID": "220b91f308381d64"
          },
          "Version": "0.7.3",
          "Locations": [
            {
              "StartLine": 15,
              "EndLine": 15
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "python-dotenv",
          "Identifier": {
            "PURL": "pkg:pypi/python-dotenv@1.2.2",
            "UID": "29ca2ac1f8ac1a96"
          },
          "Version": "1.2.2",
          "Locations": [
            {
              "StartLine": 5,
              "EndLine": 5
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "python-multipart",
          "Identifier": {
            "PURL": "pkg:pypi/python-multipart@0.0.22",
            "UID": "239944eb3401fec4"
          },
          "Version": "0.0.22",
          "Locations": [
            {
              "StartLine": 6,
              "EndLine": 6
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "starlette",
          "Identifier": {
            "PURL": "pkg:pypi/starlette@0.52.1",
            "UID": "83892e0e6a192648"
          },
          "Version": "0.52.1",
          "Locations": [
            {
              "StartLine": 9,
              "EndLine": 9
            }
          ],
          "AnalyzedBy": "pip"
        },
        {
          "Name": "uvicorn",
          "Identifier": {
            "PURL": "pkg:pypi/uvicorn@0.41.0",
            "UID": "f0e3a99b48397e02"
          },
          "Version": "0.41.0",
          "Locations": [
            {
              "StartLine": 3,
              "EndLine": 3
            }
          ],
          "AnalyzedBy": "pip"
        }
      ]
    },
    {
      "Target": "Dockerfile",
      "Class": "config",
      "Type": "dockerfile",
      "MisconfSummary": {
        "Successes": 23,
        "Failures": 1
      },
      "Misconfigurations": [
        {
          "Type": "Dockerfile Security Check",
          "ID": "DS-0029",
          "Title": "'apt-get' missing '--no-install-recommends'",
          "Description": "'apt-get' install should use '--no-install-recommends' to minimize image size.",
          "Message": "'--no-install-recommends' flag is missed: 'apt-get update && apt-get install -y     ffmpeg     && rm -rf /var/lib/apt/lists/*'",
          "Namespace": "builtin.dockerfile.DS029",
          "Query": "data.builtin.dockerfile.DS029.deny",
          "Resolution": "Add '--no-install-recommends' flag to 'apt-get'",
          "Severity": "HIGH",
          "PrimaryURL": "https://avd.aquasec.com/misconfig/ds-0029",
          "References": [
            "https://docs.docker.com/develop/develop-images/dockerfile_best-practices/",
            "https://avd.aquasec.com/misconfig/ds-0029"
          ],
          "Status": "FAIL",
          "CauseMetadata": {
            "Provider": "Dockerfile",
            "Service": "general",
            "StartLine": 5,
            "EndLine": 7,
            "Code": {
              "Lines": [
                {
                  "Number": 5,
                  "Content": "RUN apt-get update && apt-get install -y \\",
                  "IsCause": true,
                  "Annotation": "",
                  "Truncated": false,
                  "Highlighted": "\u001b[38;5;64mRUN\u001b[0m apt-get update \u001b[38;5;245m&&\u001b[0m apt-get install -y \u001b[38;5;124m\\",
                  "FirstCause": true,
                  "LastCause": false
                },
                {
                  "Number": 6,
                  "Content": "    ffmpeg \\",
                  "IsCause": true,
                  "Annotation": "",
                  "Truncated": false,
                  "Highlighted": "\u001b[0m    ffmpeg \u001b[38;5;124m\\",
                  "FirstCause": false,
                  "LastCause": false
                },
                {
                  "Number": 7,
                  "Content": "    && rm -rf /var/lib/apt/lists/*",
                  "IsCause": true,
                  "Annotation": "",
                  "Truncated": false,
                  "Highlighted": "\u001b[0m    \u001b[38;5;245m&&\u001b[0m rm -rf /var/lib/apt/lists/*",
                  "FirstCause": false,
                  "LastCause": true
                }
              ]
            }
          }
        }
      ]
    }
  ]
}
🛡️ Security Scan Report

0

1

0

0

0

1
