Merge pull request #507 from espoon-voltti/fix/CVE-2024-9681-remove-curl

Fix CVE-2024-9681
espoon-voltti · Dec 17, 2024 · 3f60806 · 3f60806
2 parents 0e49e11 + 2182732
commit 3f60806
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/api-gateway/Dockerfile b/api-gateway/Dockerfile
@@ -31,7 +31,8 @@ RUN apt-get update \
       && apt-get -y install curl \
       && curl -sSfL https://github.com/espoon-voltti/s3-downloader/releases/download/v1.4.1/s3downloader-linux-amd64 \
       -o /bin/s3download \
-      && chmod +x /bin/s3download
+      && chmod +x /bin/s3download \
+      && apt-get remove --auto-remove -y curl 
 
 ARG build=none
 ARG commit=none