SIGN IN SIGN UP

[rocm-libraries] ROCm/rocm-libraries#8716 (commit 8230b20)

[CK] [Security] remove allow-unauthenticated flag from
 dockerfile (#8716)

## Motivation

Dockerfile uses apt-get install --allow-unauthenticated which disables
APT GPG signature verification, allowing package installation without
cryptographic validation. An attacker who can perform a
man-in-the-middle attack on the build network (via corporate proxy, CI
egress, or compromised mirror) can serve trojaned .deb packages such as
libc6, cmake, or git that become embedded in published ROCm container
images distributed to users.

## Technical Details

<!-- Explain the changes along with any relevant GitHub links. -->

## Test Plan

<!-- Explain any relevant testing done to verify this PR. -->

## Test Result

<!-- Briefly summarize test outcomes. -->

## Submission Checklist

- [ ] Look over the contributing guidelines at
https://github.com/ROCm/ROCm/blob/develop/CONTRIBUTING.md#pull-requests.
I
Illia Silin committed
bd3713c7102584644d4a667d415a908868b268d0
Parent: 55e30fe
Committed by assistant-librarian[bot] <assistant-librarian[bot]@users.noreply.github.com> on 6/23/2026, 6:12:18 PM