Infrastructure/verdaccio
0
Fork 0
mirror of https://github.com/verdaccio/verdaccio.git synced 2024-12-16 21:56:25 -05:00
Code Issues Activity

fix: Dockerfile to reduce vulnerabilities (#3257)

Browse source 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2941810
- https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2941810
This commit is contained in:
Snyk bot 2022-07-11 08:28:37 +03:00 committed by GitHub
parent fcbc4bb781
commit 63f8a8aa2e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Dockerfile
View file

@ -1,4 +1,4 @@
FROM --platform=${BUILDPLATFORM:-linux/amd64} node:16.15.0-alpine as builder FROM --platform=${BUILDPLATFORM:-linux/amd64} node:16-alpine as builder
ENV NODE_ENV=development \ ENV NODE_ENV=development \
VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
@ -20,7 +20,7 @@ RUN npm -g i pnpm@6.32.15 && \
# FIXME: need to remove devDependencies from the build # FIXME: need to remove devDependencies from the build
# RUN pnpm install --prod --ignore-scripts # RUN pnpm install --prod --ignore-scripts
FROM node:16.15.0-alpine FROM node:16-alpine
LABEL maintainer="https://github.com/verdaccio/verdaccio" LABEL maintainer="https://github.com/verdaccio/verdaccio"
ENV VERDACCIO_APPDIR=/opt/verdaccio \ ENV VERDACCIO_APPDIR=/opt/verdaccio \