fix(barbican): remove cves from image
diff --git a/images/barbican/Earthfile b/images/barbican/Earthfile
index 0c843ff..df1d927 100644
--- a/images/barbican/Earthfile
+++ b/images/barbican/Earthfile
@@ -6,10 +6,13 @@
build:
FROM ../openstack-service+builder --RELEASE=${RELEASE}
+ # NOTE(mnaser): pykmip includes some demo certificates which trigger
+ # security scanners. We remove them here.
DO ../openstack-service+BUILD_VENV \
--PROJECT=${PROJECT} \
--PROJECT_REF=${PROJECT_REF} \
- --PIP_PACKAGES="pykmip"
+ --PIP_PACKAGES="pykmip" \
+ --PURGE_PATHS="kmip/demos"
image:
FROM ../openstack-service+image --RELEASE ${RELEASE} --PROJECT ${PROJECT}