From 2d3d5bc0987b7d3eebfd2674482d54b49a08e297 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 23 Nov 2025 08:28:39 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174128 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174128 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174129 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174129 - https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-13174130 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index fa4f942..cf1438a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ #syntax=docker/dockerfile:1.2 -FROM --platform=$BUILDPLATFORM alpine:3.21.3 as builder +FROM --platform=$BUILDPLATFORM alpine:3.21.5 as builder ARG TARGETPLATFORM ARG BUILDPLATFORM @@ -12,7 +12,7 @@ RUN export RELEASE_LOCATION="${GH_VERSION}_$(echo "${BUILDPLATFORM//\//_}")" && chmod +x gh_${RELEASE_LOCATION}/bin/gh && \ rsync -az --remove-source-files gh_${RELEASE_LOCATION}/bin/ /usr/bin -FROM alpine:3.21.3 as gh +FROM alpine:3.21.5 as gh RUN apk add --no-cache git libc6-compat COPY --from=builder /usr/bin/gh /usr/bin/