Skip to content

Commit c1b0459

Browse files
joltcansnyk-bot
andauthored
Fix docker vulnerabilites by upgrading node image (#551)
* fix: Dockerfile to reduce vulnerabilities (#29) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE315-ZLIB-2976173 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-3314621 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-3314622 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-3314629 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-3368753 Co-authored-by: snyk-bot <[email protected]> * Do rebase outside of the make instead * Use 22-alpine for docker --------- Co-authored-by: snyk-bot <[email protected]>
1 parent dfd5b7c commit c1b0459

File tree

2 files changed

+2
-3
lines changed

2 files changed

+2
-3
lines changed

Dockerfile

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
1-
FROM node:17.8-alpine3.15
1+
FROM node:22-alpine
22

33
EXPOSE 8061
44

55
WORKDIR /iframely
66

77
# Create new non-root user
8-
RUN addgroup -S iframelygroup && adduser -S iframely -G iframelygroup
8+
RUN addgroup --system iframelygroup && adduser --system iframely -G iframelygroup
99
RUN apk add g++ make python3
1010

1111
# This will change the config to `config.<VALUE>.js` and the express server to change its behaviour.

Makefile

-1
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,6 @@ PUBLISHPORT := ${EXPOSEPORT}
77

88
build:
99
git checkout main
10-
git pull --rebase upstream main
1110
git branch -f tag-${VERSION}
1211
git checkout tag-${VERSION}
1312
docker \

0 commit comments

Comments
 (0)