From a37c2a8e8364616f048afe240a01bc898690f587 Mon Sep 17 00:00:00 2001
From: Quentin BEY <quentin.bey@mail.numerique.gouv.fr>
Date: Tue, 23 Sep 2025 14:31:13 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=92=EF=B8=8F(frontend)=20update=20alpi?=
 =?UTF-8?q?ne=20packages=20in=20production=20image?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Force an update of installed package in the image used for
the frontend in production.
---
 src/frontend/Dockerfile | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile
index f596706..ba2bbd6 100644
--- a/src/frontend/Dockerfile
+++ b/src/frontend/Dockerfile
@@ -47,6 +47,13 @@ RUN yarn build
 # ---- Front-end image ----
 FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production
 
+# Upgrade system packages to install security updates
+USER root
+RUN apk update && \
+  apk upgrade && \
+  rm -rf /var/cache/apk/*
+USER -
+
 # Un-privileged user running the application
 ARG DOCKER_USER
 USER ${DOCKER_USER}