The Alpine Mirage: How Upgrading Python Broke My Build and Led to a Truer Security Posture

This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry.

The Initial Goal: "Upgrade and Secure"

Like many developers, I recently fell into the trap of assuming that "smaller is always better, and newer is always safer." I decided to upgrade my terminal-based web UI project, py_terminal, to the bleeding-edge python:3.15-rc-alpine Docker base image.

The logic was sound:

Alpine Linux has a much smaller footprint, meaning a smaller attack surface.

The Alpine Mirage: How Upgrading Python Broke My Build and Led to a Truer Security Posture

Related reading

My Summer of Sleuthing: 373 Merged PRs and the Bugs That Taught Me Everything

Two exploits, one public API key: the day I attacked my own Supabase app

I shipped a fix for a breaking change. The code could never select it.

Gotcha: chasing a bug that was never in my code

How I Smashed a Bug in a Shared Authentication Library

The bug that never crashed: how I fuzzed an AI's own code sandbox and found it…