fix: update npm in production images to resolve crossspawn vuln

jonnyowenpowell · jonnyowenpowell · commit d867a62e9ce7 · 2025-01-15T09:48:20.000Z
diff --git a/Dockerfile b/Dockerfile
@@ -30,6 +30,8 @@ RUN apk update
 RUN apk upgrade
 RUN apk --no-cache add dumb-init skopeo curl bash python3
 
+RUN npm install -g npm@v10.9.2
+
 RUN addgroup -S -g 10001 snyk
 RUN adduser -S -G snyk -h /srv/app -u 10001 snyk
 
