From d151387af0b43792f9875a0d89b0338bdd5a53bf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 31 Mar 2023 02:10:32 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-3035792 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-3035795 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-3105822 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-3326666 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-3326683 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 41d2cc8..47207d0 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # First image to compile typescript to javascript -FROM node:16.14.2-alpine AS build-image +FROM node:16.20-alpine AS build-image WORKDIR /app COPY . . RUN npm ci @@ -7,7 +7,7 @@ RUN npm run build RUN npm test # Second image, that creates an image for production -FROM node:16.14.2-alpine AS prod-image +FROM node:16.20-alpine AS prod-image WORKDIR /app COPY --from=build-image ./app/dist ./dist COPY package* ./