Skip to content

Commit

Permalink
fix(Dockerfile): remove manual ssl upgrade
Browse files Browse the repository at this point in the history
  • Loading branch information
chohner committed Dec 10, 2024
1 parent bbae9d4 commit 6f31ad1
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -26,10 +26,8 @@ FROM ${APP_IMAGE} AS appStageForCopy
FROM node:20-alpine AS prod

# TODO: Check https://hub.docker.com/r/library/node/tags?name=alpine3.20
# - Remove crypto&ssl if CVE-2024-9143 is fixed (https://scout.docker.com/vulnerabilities/id/CVE-2024-9143?s=alpine)
# - Remove npm upgrade if CVE-2024-21538 is fixed (https://scout.docker.com/vulnerabilities/id/CVE-2024-21538?s=github)
RUN apk add --no-cache libcrypto3=3.3.2-r1 libssl3=3.3.2-r1 && \
npm update -g npm && npm cache clean --force && \
RUN npm update -g npm && npm cache clean --force && \
apk add --no-cache dumb-init && rm -rf /var/cache/apk/*

USER node
Expand Down

0 comments on commit 6f31ad1

Please sign in to comment.