[Snyk] Security upgrade python from 3.7-alpine to 3.13.4-alpine

[wasimakh2]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to python:3.13.4-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Integer Overflow or Wraparound SNYK-ALPINE318-EXPAT-7908292	714
	Integer Overflow or Wraparound SNYK-ALPINE318-EXPAT-7908293	714
	CVE-2024-37371 SNYK-ALPINE318-KRB5-8366395	714
	Resource Exhaustion SNYK-ALPINE318-EXPAT-6241039	614
	Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') SNYK-ALPINE318-EXPAT-6446356	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Resource Exhaustion

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Insecure Access Control (1)

Severity	Details	Docs
High	Title: Missing User Instruction informer/Dockerfile Line 1 in ff15f4a FROM python:3.13.4-alpine	📚

More info on how to fix Insecure Access Control in Dockerfile.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[Copilot]

Pull Request Overview

Upgrades the Docker base image from Python 3.7 (Alpine) to Python 3.13.4 (Alpine) to address multiple security vulnerabilities.

• Bumps the FROM image to python:3.13.4-alpine
• Retains and installs required build and runtime packages

Comments suppressed due to low confidence (3)

Dockerfile:1

• After bumping the base image to Python 3.13.4, add or update CI/ smoke tests to verify compatibility and catch any regressions introduced by the new runtime.

FROM python:3.13.4-alpine

Dockerfile:2

• Consider consolidating the multiple RUN instructions into a single layer (e.g., combining all apk add/update calls) to reduce image size and speed up builds.

RUN apk add --no-cache gcc musl-dev

Dockerfile:4

• [nitpick] The python package may be redundant since the base image already includes Python 3; consider removing it or explicitly installing python3 if a separate alias is needed.

apk add git alpine-sdk bash python