Skip to content

Commit e847568

Browse files
fix: aquasec vulnerabilitiy fixes
1 parent 53c8567 commit e847568

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

zokrates-for-ssb.Dockerfile

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,13 @@ RUN mkdir -p /app/output
4444
RUN mkdir -p /app/circuits
4545
# Install npm packages as root
4646
RUN npm ci --omit=dev
47+
48+
# Remove npm, npx to remove glob vulnerability
49+
RUN rm -rf /usr/local/lib/node_modules/npm \
50+
&& rm -f /usr/local/bin/npm /usr/local/bin/npx \
51+
&& rm -f /usr/local/bin/yarn /usr/local/bin/yarnpkg \
52+
&& rm -rf /usr/lib/node_modules/npm
53+
4754
# Change/Add permission to user $USERNAME
4855
RUN groupadd --gid 10001 $USERNAME && \
4956
useradd --gid 10001 --uid 10001 --home /app --shell /bin/bash $USERNAME && \

0 commit comments

Comments
 (0)