curl in Jetty 9 images has medium CVE

[michaelmior]

Docker Scout flags the installed version of curl in jetty:9-jre8-alpine as having a medium severity CVE. Since curl (and I think gnupg also) are only needed during the setup process, can they be removed once they are used?

[joakime]

Jetty 9 is at End of Community Support.

• EoCS (End of Community Support) for Jetty 9 - June 2022 jetty.project#7958

[michaelmior]

@joakime Okay, thanks for the notice. Looks like then this won't be fixed.