Skip to content

[server, bridge] Switch base-images to node:18.20.7-alpine to avoid CVEs #20692

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 21, 2025
Merged

[server, bridge] Switch base-images to node:18.20.7-alpine to avoid CVEs #20692

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 5 additions & 6 deletions components/server/leeway.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,20 +2,19 @@
# Licensed under the GNU Affero General Public License (AGPL).
# See License.AGPL.txt in the project root for license information.

FROM node:18.17.1-slim AS builder
FROM node:18.20.7-alpine AS builder

# Install Python, make, gcc and g++ for node-gyp
RUN apt-get update && \
apt-get install -y python3 make gcc g++ && \
apt-get clean && \
rm -rf /var/lib/apt/lists/*
RUN apk update && \
apk add python3 make gcc g++ bash && \
rm -rf /var/cache/apk/*

COPY components-server--app /installer/

WORKDIR /app
RUN /installer/install.sh

FROM cgr.dev/chainguard/node:18.17.1@sha256:af073516c203b6bd0b55a77a806a0950b486f2e9ea7387a32b0f41ea72f20886
FROM node:18.20.7-alpine
ENV NODE_OPTIONS="--unhandled-rejections=warn --max_old_space_size=2048"

EXPOSE 3000
Expand Down
10 changes: 8 additions & 2 deletions components/ws-manager-bridge/leeway.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,19 @@
# Licensed under the GNU Affero General Public License (AGPL).
# See License.AGPL.txt in the project root for license information.

FROM node:18.17.1-slim as builder
FROM node:18.20.7-alpine AS builder

# Install bash for the installer script
RUN apk update && \
apk add bash && \
rm -rf /var/cache/apk/*

COPY components-ws-manager-bridge--app /installer/

WORKDIR /app
RUN /installer/install.sh

FROM cgr.dev/chainguard/node:18.17.1@sha256:af073516c203b6bd0b55a77a806a0950b486f2e9ea7387a32b0f41ea72f20886
FROM node:18.20.7-alpine
ENV NODE_OPTIONS=--unhandled-rejections=warn
EXPOSE 3000
COPY --from=builder --chown=node:node /app /app/
Expand Down
Loading