fix(LLM-6233): Docker CIS compliance rules 4.4 & 4.7 (#397)

* Ensure images are scanned and rebuilt to include security patches
* [fixed license versions (added comments &
excludes)](226f89f)

---------

Co-authored-by: DovnarAlexander <[email protected]>
Co-authored-by: Jonathan Liberman <[email protected]>

Author: 3 people

Dockerfile

@@ -8,7 +8,7 @@
 # along with Deepchecks.  If not, see <http://www.gnu.org/licenses/>.
 # ----------------------------------------------------------------------------
 
-FROM --platform=$BUILDPLATFORM node:16.15-alpine3.14 AS frontend
+FROM --platform=$BUILDPLATFORM node:20.10-alpine3.19 AS frontend
 
 WORKDIR /code
 
@@ -31,9 +31,7 @@ ENV TZ=Asia/Jerusalem
 RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
 
 RUN echo "Updated on 2 Apr 2024" # Change to force apt to update the cache
-RUN apt-get -y update &&  apt-get -y upgrade
-
-RUN apt-get install -y software-properties-common && add-apt-repository ppa:deadsnakes/ppa &&  \
+RUN set -x && apt-get -qqy update && apt-get install -y software-properties-common && add-apt-repository ppa:deadsnakes/ppa &&  \
     apt install -y git python3.11 python3.11-dev python3.11-distutils curl g++ libpq-dev &&  \
     curl -sS https://bootstrap.pypa.io/get-pip.py | python3.11