ci: upgrade image packages
This commit is contained in:
@@ -14,6 +14,9 @@ RUN bun run build
|
|||||||
# Production stage
|
# Production stage
|
||||||
FROM nginx:alpine AS production
|
FROM nginx:alpine AS production
|
||||||
|
|
||||||
|
# Patch inherited Alpine OS packages to clear known CVEs not yet in the base image
|
||||||
|
RUN apk upgrade --no-cache
|
||||||
|
|
||||||
COPY --from=builder /app/dist /usr/share/nginx/html
|
COPY --from=builder /app/dist /usr/share/nginx/html
|
||||||
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user