From 09016afe6cd5a61f00cf3f6b2a8bf56932778d44 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 9 Feb 2023 04:50:53 +0000 Subject: [PATCH] fix: dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314651 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314657 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314658 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314659 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314660 --- dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dockerfile b/dockerfile index dfc1962..a48d952 100644 --- a/dockerfile +++ b/dockerfile @@ -1,6 +1,6 @@ # STEP 1 build executable binary -FROM golang:1.18-alpine AS build_base +FROM golang:1.19.2-alpine AS build_base # Install git RUN apk update && apk add git && apk add ca-certificates @@ -27,7 +27,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -ldflags '-w -s' -o /go/bi # STEP 2 build a small image # start from scratch -FROM golang:1.18-alpine +FROM golang:1.19.2-alpine COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ COPY --from=builder /etc/passwd /etc/passwd