fix: Address CVE in Alpine base image (#253)

Signed-off-by: Leonard Goodell <leonard.goodell@intel.com>
edgexfoundry · Nov 14, 2023 · a6afd8f · a6afd8f
1 parent a0e1407
commit a6afd8f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -38,6 +38,8 @@ LABEL license='SPDX-License-Identifier: Apache-2.0' \
 LABEL Name=app-service-rfid-llrp-inventory Version=${VERSION}
 
 RUN apk --no-cache add ca-certificates dumb-init
+# Ensure using latest versions of all installed packages to avoid any recent CVEs
+RUN apk --no-cache upgrade
 
 COPY --from=builder /app/Attribution.txt /Attribution.txt
 COPY --from=builder /app/LICENSE /LICENSE