feat: fix security issues

Author: ovsds

backend/Dockerfile

@@ -1,5 +1,5 @@
-ARG BASE_BUILDER_IMAGE=python:3.12.1
-ARG BASE_RUNTIME_IMAGE=python:3.12.1-slim
+ARG BASE_BUILDER_IMAGE=python:3.12.7-alpine3.20
+ARG BASE_RUNTIME_IMAGE=python:3.12.7-alpine3.20
 
 FROM ${BASE_BUILDER_IMAGE} AS builder
 

backend/Taskfile.yaml

@@ -267,3 +267,5 @@ tasks:
       - trivy image
         --config trivy.yaml
         {{.IMAGE_REGISTRY}}/{{.IMAGE_NAME}}:{{.IMAGE_TAG}}
+    env:
+      TRIVY_DISABLE_VEX_NOTICE: "true"