From 36728370bef68262ad037be13c514c8f9daa18d2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 27 Mar 2026 20:49:47 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-15763402 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-15763406 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-15763410 - https://snyk.io/vuln/SNYK-UPSTREAM-NODE-15763413 - https://snyk.io/vuln/SNYK-ALPINE323-ZLIB-15435529 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index a054ed6..156c419 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # syntax=docker/dockerfile:1 # Build stage -FROM node:lts-alpine AS builder +FROM node:24.14.1-alpine3.23 AS builder WORKDIR /app COPY package.json yarn.lock* ./ RUN apk upgrade --no-cache && apk add --no-cache make python3 g++ git && yarn install @@ -10,7 +10,7 @@ COPY index.js tsconfig.json ./ RUN yarn run build # Production stage -FROM node:lts-alpine +FROM node:24.14.1-alpine3.23 RUN apk upgrade --no-cache && npm install -g npm@latest WORKDIR /app COPY --from=builder /app/lib ./lib