-
Notifications
You must be signed in to change notification settings - Fork 113
Description
The Google docs for the Python runtime state that "The Python runtime is based on Ubuntu 18.04", and points to this repo, where indeed the build script specifies os_base=ubuntu18. That change was made back in July 2021. Yet if one goes to the Google container registry page, the 'latest' image (dated Oct 4, 2021):
gcr.io/google-appengine/python@sha256:c6480acd38ca4605e0b83f5196ab6fe8a8b59a0288a7b8216c42dbc45b5de8f6
appears to be for Ubuntu 16. For example, a Container Registry Vulnerability Scan for an AppEngine Flex image deployed with runtime: python shows up with Affected location cpe:/o:canonical:ubuntu_linux:16.04.
So why the discrepancy? Are Google App Engine Flex Python runtimes based on 18 (per the docs and this repo) or 16 (per what actually appears to show up in the Registry)?
Thanks.