Skip to content

Commit

Permalink
chore: Update openssl to address a security vulnerability (#162)
Browse files Browse the repository at this point in the history
* chore: Update openssl to address a security vulnerability

* chore: remove --no-cache
  • Loading branch information
andreas-unleash committed Jan 25, 2024
1 parent 9868698 commit ae471e5
Showing 1 changed file with 7 additions and 2 deletions.
9 changes: 7 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,16 @@ RUN yarn install --frozen-lockfile --ignore-scripts

RUN yarn build

RUN yarn install --production --frozen-lockfile --ignore-scripts --prefer-offline
RUN yarn install --production --frozen-lockfile --ignore-scripts --prefer-offline

FROM node:18-alpine

# Update OpenSSL to address CVE-2023-6237
RUN apk update && \
apk upgrade openssl && \
apk add tini && \
rm -rf /var/cache/apk/*

ENV NODE_ENV production

WORKDIR /unleash-proxy
Expand All @@ -22,7 +28,6 @@ RUN rm -rf /usr/local/lib/node_modules/npm/

RUN chown -R node:node /unleash-proxy

RUN apk add --no-cache tini
ENTRYPOINT ["/sbin/tini", "--"]

EXPOSE 4242
Expand Down

0 comments on commit ae471e5

Please sign in to comment.