CVEs in the testrail images

[DmitryZ-outten]

The latest testrail images have a lot of CRITICAL CVEs.

How to scan:
docker run --rm -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:0.21.0 -d image --severity CRITICAL testrail/php:6.3.1

One of the possible solutions is to switch base image from php:7.2-fpm to alpine based (e.g. php:7.4-fpm-alpine3.14)

[DmitryZ-outten]

The latest docker image: testrail/apache:7.0.2
Also has a lot of CRITICAL CVEs:

docker run --rm -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy:0.21.0 -d image --severity CRITICAL testrail/apache:7.0.2