anchor.diff:  
   RUN apt-get update \
   	&& apt-get install --no-install-recommends --no-install-suggests -y libcap2-bin \
  -	# temporary fix for CVE-2022-22822
  -	&& apt-get install -y libexpat1 \
  +	# temp fix for CVE-2022-0891, CVE-2021-33574, CVE-2021-3997 and CVE-2022-23308
  +	&& apt-get install -y libtiff5 libc6 libc-bin libxml2 libsystemd0 libudev1 \
   	&& rm -rf /var/lib/apt/lists/* \
   	&& echo $NGINX_VERSION > nginx_version
   
  
positive.code: 	io.openshift.tags="nginx,ingress-controller,ingress,controller,kubernetes,openshift"
  
  RUN dnf --nodocs install -y shadow-utils ca-certificates \
  	&& groupadd --system --gid 101 nginx \
  	&& useradd --system --gid nginx --no-create-home --home-dir /nonexistent --comment "nginx user" --shell /bin/false --uid 101 nginx
  
  
negative.code: 	&& apt-get update \
  	&& apt-get install --no-install-recommends --no-install-suggests -y \
  	nginx-plus-module-appprotect app-protect app-protect-attack-signatures app-protect-threat-campaigns \
  	# temp fix for CVE-2021-43618
  	&& apt-get install -y libgmp10 \
  	&& apt-get purge --auto-remove -y apt-transport-https gnupg curl \
  	&& rm -rf /var/lib/apt/lists/* \
  	&& rm /etc/apt/sources.list.d/nginx-app-protect.list
  