From f1d94eedf68e917bb396f0903f65c0d9f56c36d9 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 27 Jan 2024 15:06:31 +0000 Subject: [PATCH] fix: examples/with-docker/apps/web/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-6148881 - https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-6148881 - https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-6159994 - https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-6159994 - https://snyk.io/vuln/SNYK-ALPINE319-OPENSSL-6191693 --- examples/with-docker/apps/web/Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/examples/with-docker/apps/web/Dockerfile b/examples/with-docker/apps/web/Dockerfile index 94cf8df8ac9f4..05494beacfb9b 100644 --- a/examples/with-docker/apps/web/Dockerfile +++ b/examples/with-docker/apps/web/Dockerfile @@ -1,4 +1,4 @@ -FROM node:alpine AS builder +FROM node:21.6.0-alpine3.19 AS builder RUN apk update # Set working directory WORKDIR /app @@ -7,7 +7,7 @@ COPY . . RUN turbo prune --scope=web --docker # Add lockfile and package.json's of isolated subworkspace -FROM node:alpine AS installer +FROM node:21.6.0-alpine3.19 AS installer RUN apk update WORKDIR /app @@ -22,7 +22,7 @@ COPY --from=builder /app/out/full/ . COPY turbo.json turbo.json RUN yarn turbo run build --filter=web... -FROM node:alpine AS runner +FROM node:21.6.0-alpine3.19 AS runner WORKDIR /app # Don't run production as root