[rocm-libraries] ROCm/rocm-libraries#8716 (commit 8230b20)
[CK] [Security] remove allow-unauthenticated flag from dockerfile (#8716) ## Motivation Dockerfile uses apt-get install --allow-unauthenticated which disables APT GPG signature verification, allowing package installation without cryptographic validation. An attacker who can perform a man-in-the-middle attack on the build network (via corporate proxy, CI egress, or compromised mirror) can serve trojaned .deb packages such as libc6, cmake, or git that become embedded in published ROCm container images distributed to users. ## Technical Details <!-- Explain the changes along with any relevant GitHub links. --> ## Test Plan <!-- Explain any relevant testing done to verify this PR. --> ## Test Result <!-- Briefly summarize test outcomes. --> ## Submission Checklist - [ ] Look over the contributing guidelines at https://github.com/ROCm/ROCm/blob/develop/CONTRIBUTING.md#pull-requests.
I
Illia Silin committed
bd3713c7102584644d4a667d415a908868b268d0
Parent: 55e30fe
Committed by assistant-librarian[bot] <assistant-librarian[bot]@users.noreply.github.com>
on 6/23/2026, 6:12:18 PM