From d512aa7bb9dd6fa0caa91c7b382e8746ae357e8f Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 16 Feb 2025 23:00:32 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 - https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-7249236 - https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-7249265 - https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-7249419 --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 24eb450152..318361cea7 100644 --- a/Dockerfile +++ b/Dockerfile @@ -22,13 +22,13 @@ COPY . . RUN make release-binary -FROM alpine:3.18.3 AS stager +FROM alpine:3.21.3 AS stager RUN mkdir -p /var/dex RUN mkdir -p /etc/dex COPY config.docker.yaml /etc/dex/ -FROM alpine:3.18.3 AS gomplate +FROM alpine:3.21.3 AS gomplate ARG TARGETOS ARG TARGETARCH @@ -41,7 +41,7 @@ RUN wget -O /usr/local/bin/gomplate \ && chmod +x /usr/local/bin/gomplate # For Dependabot to detect base image versions -FROM alpine:3.18.3 AS alpine +FROM alpine:3.21.3 AS alpine FROM gcr.io/distroless/static:latest AS distroless FROM $BASE_IMAGE