Skip to content

Commit ae471e5

Browse files
chore: Update openssl to address a security vulnerability (#162)
* chore: Update openssl to address a security vulnerability * chore: remove --no-cache
1 parent 9868698 commit ae471e5

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

Dockerfile

+7-2
Original file line numberDiff line numberDiff line change
@@ -8,10 +8,16 @@ RUN yarn install --frozen-lockfile --ignore-scripts
88

99
RUN yarn build
1010

11-
RUN yarn install --production --frozen-lockfile --ignore-scripts --prefer-offline
11+
RUN yarn install --production --frozen-lockfile --ignore-scripts --prefer-offline
1212

1313
FROM node:18-alpine
1414

15+
# Update OpenSSL to address CVE-2023-6237
16+
RUN apk update && \
17+
apk upgrade openssl && \
18+
apk add tini && \
19+
rm -rf /var/cache/apk/*
20+
1521
ENV NODE_ENV production
1622

1723
WORKDIR /unleash-proxy
@@ -22,7 +28,6 @@ RUN rm -rf /usr/local/lib/node_modules/npm/
2228

2329
RUN chown -R node:node /unleash-proxy
2430

25-
RUN apk add --no-cache tini
2631
ENTRYPOINT ["/sbin/tini", "--"]
2732

2833
EXPOSE 4242

0 commit comments

Comments
 (0)