From 5978e798328549c9d6ffdec1801c3d42b07e0353 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 12 Oct 2025 09:17:33 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174128 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174128 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174129 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174129 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174130 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index fa4f942..28ed8aa 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ #syntax=docker/dockerfile:1.2 -FROM --platform=$BUILDPLATFORM alpine:3.21.3 as builder +FROM --platform=$BUILDPLATFORM alpine:3.22.2 as builder ARG TARGETPLATFORM ARG BUILDPLATFORM @@ -12,7 +12,7 @@ RUN export RELEASE_LOCATION="${GH_VERSION}_$(echo "${BUILDPLATFORM//\//_}")" && chmod +x gh_${RELEASE_LOCATION}/bin/gh && \ rsync -az --remove-source-files gh_${RELEASE_LOCATION}/bin/ /usr/bin -FROM alpine:3.21.3 as gh +FROM alpine:3.22.2 as gh RUN apk add --no-cache git libc6-compat COPY --from=builder /usr/bin/gh /usr/bin/