ci: upgrade image packages
This commit is contained in:
@@ -14,6 +14,9 @@ RUN bun run build
|
||||
# Production stage
|
||||
FROM nginx:alpine AS production
|
||||
|
||||
# Patch inherited Alpine OS packages to clear known CVEs not yet in the base image
|
||||
RUN apk upgrade --no-cache
|
||||
|
||||
COPY --from=builder /app/dist /usr/share/nginx/html
|
||||
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
||||
|
||||
|
||||
Reference in New Issue
Block a user