From 98a40887f54fa01549c26f0187f2d5bd65df5bf4 Mon Sep 17 00:00:00 2001 From: Snyk bot Date: Mon, 21 Mar 2022 11:25:18 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities (#3073) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE315-LIBRETLS-2428776 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2426331 - https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2426331 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 8a0e86584..354dd9b37 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM --platform=${BUILDPLATFORM:-linux/amd64} node:16.13.2-alpine as builder +FROM --platform=${BUILDPLATFORM:-linux/amd64} node:16.14.2-alpine as builder ENV NODE_ENV=development \ VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org @@ -20,7 +20,7 @@ RUN npm -g i pnpm@6.24.1 && \ # FIXME: need to remove devDependencies from the build # RUN pnpm install --prod --ignore-scripts -FROM node:16.13.2-alpine +FROM node:16.14.2-alpine LABEL maintainer="https://github.com/verdaccio/verdaccio" ENV VERDACCIO_APPDIR=/opt/verdaccio \