Skip to content

Commit f09be7a

Browse files
committed
build: update alpine packages in Docker image to address CVEs
1 parent 2bef2af commit f09be7a

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

Dockerfile

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ RUN make licenses-report
3636
##
3737
## Runtime
3838
##
39-
FROM alpine
39+
FROM alpine:3.23
4040

4141
ARG VERSION=unknown
4242
ARG REVISION=unknown
@@ -49,7 +49,8 @@ RUN echo "$VERSION" > /version.txt && echo "$REVISION" > /revision.txt
4949
ARG USERNAME=steadybit
5050
ARG USER_UID=10000
5151

52-
RUN adduser -u $USER_UID -D $USERNAME
52+
RUN apk update && apk upgrade --no-cache && rm -rf /var/cache/apk/* && \
53+
adduser -u $USER_UID -D $USERNAME
5354

5455
USER $USER_UID
5556

0 commit comments

Comments
 (0)