Infrastructure/verdaccio
0
Fork 0
mirror of https://github.com/verdaccio/verdaccio.git synced 2024-12-30 22:34:10 -05:00
Code Issues Activity

fix: Dockerfile to reduce vulnerabilities (#2406)

Browse source
This commit is contained in:
Snyk bot 2021-09-03 07:59:44 +02:00 committed by GitHub
parent f96b147ea1
commit 3763b9f285
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Dockerfile
View file

@ -1,4 +1,4 @@
FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.16.1-alpine as builder FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.17.6-alpine as builder
ENV NODE_ENV=development \ ENV NODE_ENV=development \
VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
@ -19,7 +19,7 @@ RUN npm -g i pnpm@6.10.3 && \
# FIXME: need to remove devDependencies from the build # FIXME: need to remove devDependencies from the build
# RUN pnpm install --prod --ignore-scripts # RUN pnpm install --prod --ignore-scripts
FROM node:14.16.1-alpine FROM node:14.17.6-alpine
LABEL maintainer="https://github.com/verdaccio/verdaccio" LABEL maintainer="https://github.com/verdaccio/verdaccio"
ENV VERDACCIO_APPDIR=/opt/verdaccio \ ENV VERDACCIO_APPDIR=/opt/verdaccio \