mirror of
https://github.com/bookorbit/bookorbit.git
synced 2026-11-03 00:11:37 -06:00
security(deps): patch container vulnerabilities
Use the supported Alpine 3.23 Node image to avoid vulnerable util-linux packages in Alpine 3.24. Force fast-uri 3.1.6 to resolve the SSRF advisories reported by the image scan.
This commit is contained in:
+1
-1
@@ -1,4 +1,4 @@
|
||||
ARG NODE_IMAGE=node:26.7.0-alpine@sha256:aadf416b2cdce311a8811ba3f0608a61b77dbf997500e2eafe781b51f6a0b019
|
||||
ARG NODE_IMAGE=node:26.8.1-alpine3.23@sha256:871eb674ad6e692c91330a8959f1ce2f80ba3f445cdc54e306869d2ea265e42d
|
||||
|
||||
FROM ${NODE_IMAGE} AS base
|
||||
RUN npm install -g pnpm@11.22.0
|
||||
|
||||
Reference in New Issue
Block a user