fix: Dockerfile to reduce vulnerabilities

snyk-bot · snyk-bot · commit 5005fd740c3f · 2022-02-18T11:14:46.000Z
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE313-APKTOOLS-1533754 - https://snyk.io/vuln/SNYK-ALPINE313-OPENSSL-1089239 - https://snyk.io/vuln/SNYK-ALPINE313-OPENSSL-1569446 - https://snyk.io/vuln/SNYK-ALPINE313-OPENSSL-1569448 - https://snyk.io/vuln/SNYK-ALPINE313-OPENSSL-1569448
diff --git a/Dockerfile b/Dockerfile
@@ -10,7 +10,7 @@ RUN mvn -f pom.xml clean install -DskipTests=true
 ##RUN ./mvnw clean package -DskipTests
 #
 ##FROM adoptopenjdk/openjdk11:alpine-jre
-FROM openjdk:16-alpine
+FROM openjdk:16-ea-29-oraclelinux8
 COPY --from=build /workspace/target/*.jar app.jar
 #EXPOSE 8080
 #ENTRYPOINT ["java","-jar","app.jar"]

Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@ RUN mvn -f pom.xml clean install -DskipTests=true`
`10`	`10`	`##RUN ./mvnw clean package -DskipTests`
`11`	`11`	`#`
`12`	`12`	`##FROM adoptopenjdk/openjdk11:alpine-jre`
`13`		`-FROM openjdk:16-alpine`
	`13`	`+FROM openjdk:16-ea-29-oraclelinux8`
`14`	`14`	`COPY --from=build /workspace/target/*.jar app.jar`
`15`	`15`	`#EXPOSE 8080`
`16`	`16`	`#ENTRYPOINT ["java","-jar","app.jar"]`