🔒️(frontend) update alpine packages in production image

Force an update of installed package in the image used for
the frontend in production.
This commit is contained in:
Quentin BEY
2025-09-23 14:31:13 +02:00
parent 80da8bea74
commit a37c2a8e83

View File

@@ -47,6 +47,13 @@ RUN yarn build
# ---- Front-end image ----
FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production
# Upgrade system packages to install security updates
USER root
RUN apk update && \
apk upgrade && \
rm -rf /var/cache/apk/*
USER -
# Un-privileged user running the application
ARG DOCKER_USER
USER ${DOCKER_USER}