🔒️(frontend) update alpine packages in production image
Force an update of installed package in the image used for the frontend in production.
This commit is contained in:
@@ -47,6 +47,13 @@ RUN yarn build
|
|||||||
# ---- Front-end image ----
|
# ---- Front-end image ----
|
||||||
FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production
|
FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production
|
||||||
|
|
||||||
|
# Upgrade system packages to install security updates
|
||||||
|
USER root
|
||||||
|
RUN apk update && \
|
||||||
|
apk upgrade && \
|
||||||
|
rm -rf /var/cache/apk/*
|
||||||
|
USER -
|
||||||
|
|
||||||
# Un-privileged user running the application
|
# Un-privileged user running the application
|
||||||
ARG DOCKER_USER
|
ARG DOCKER_USER
|
||||||
USER ${DOCKER_USER}
|
USER ${DOCKER_USER}
|
||||||
|
|||||||
Reference in New Issue
Block a user