The issue here is valid not only, but we found for .NET base images Alpine: - mcr.microsoft.com/dotnet/runtime-deps:8.0.1-alpine3.18 -mcr.microsoft.com/dotnet/aspnet:8.0.1-alpine3.18 The libggcc comes with the base image it’s a dependency of libstdc++ (also comes with the base image). And we need the icu-libs to solve the issue with Globalization Invariant for .NET apps. This library icu-libs also depends on libgcc . But the docker image scan of stackrox finds gcc (compiler) and classify the violation as high.

Source URL:
Feature:
Allowed to reach out: Yes
UX research signup: No
Email: felipe.lino@farfetch.com