From 89dc3a28932b96402c562dea1a8b285fd265c85d Mon Sep 17 00:00:00 2001
From: sangnn <sangnn.vng@gmail.com>
Date: Tue, 23 Jun 2026 02:02:06 +0000
Subject: [PATCH] ci: upgrade image packages

---
 Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index bf123fa..d7094d1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,6 +14,9 @@ RUN bun run build
 # Production stage
 FROM nginx:alpine AS production
 
+# Patch inherited Alpine OS packages to clear known CVEs not yet in the base image
+RUN apk upgrade --no-cache
+
 COPY --from=builder /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf