Skip to content

Commit d7b2e0f

Browse files
committed
Don't wait for alpine to build image with security fixes
1 parent ee25293 commit d7b2e0f

File tree

1 file changed

+6
-1
lines changed

1 file changed

+6
-1
lines changed

Dockerfile

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,12 @@ LABEL revision=$PRODUCT_REVISION
2626
ARG UID=100
2727
ARG GID=1000
2828
# Create a non-root user to run the software.
29-
RUN addgroup -g ${GID} ${BIN_NAME} \
29+
# Install security updates not included in alpine:3.18.4.
30+
# libcrypto3, libssl3: CVE-2023-5363 CVE-2023-5678
31+
RUN apk --no-cache upgrade \
32+
libcrypto3 \
33+
libssl3 \
34+
&& addgroup -g ${GID} ${BIN_NAME} \
3035
&& adduser -u ${UID} -S -G ${BIN_NAME} ${BIN_NAME}
3136

3237
# where the build system stores the builds

0 commit comments

Comments
 (0)