From bd65a05bec42c502f953f8c0bec7723f05c8ef22 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 5 Sep 2024 15:24:24 +0000 Subject: [PATCH] fix: backend/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089232 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089232 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089235 - https://snyk.io/vuln/SNYK-ALPINE39-OPENSSL-1089235 - https://snyk.io/vuln/SNYK-ALPINE39-MUSL-1042761 --- backend/Dockerfile | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/backend/Dockerfile b/backend/Dockerfile index f9de2380f..8b34099ff 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -28,7 +28,7 @@ RUN cd registration_api && GOFLAGS=" -tags=musl" SPEC_FILE="../dockerdeps/interf RUN cd notification-service && GOFLAGS=" -tags=musl" SPEC_FILE="../dockerdeps/interfaces/notification-service.yaml" make all # Start fresh from a smaller image -FROM alpine:3.9 as vaccination_api +FROM alpine:3.17 as vaccination_api LABEL name=vaccination_api RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/vaccination_api/divoc-server /app/divoc-server @@ -36,14 +36,14 @@ COPY vaccination_api/config /config EXPOSE 8000 CMD ["/app/divoc-server", "--scheme", "http", "--port", "8000", "--host", "0.0.0.0"] -FROM alpine:3.9 as analytics_feed +FROM alpine:3.17 as analytics_feed LABEL name=analytics_feed RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/vaccination_api/analytics_feed /app/analytics_feed COPY vaccination_api/config /config CMD ["/app/analytics_feed"] -FROM alpine:3.9 as certificate_processor +FROM alpine:3.17 as certificate_processor LABEL name=certificate_processor RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/vaccination_api/certificate_processor /app/certificate_processor @@ -51,7 +51,7 @@ COPY vaccination_api/config /config CMD ["/app/certificate_processor"] #portal api -FROM alpine:3.9 as portal_api +FROM alpine:3.17 as portal_api LABEL name=portal_api RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/portal_api/divoc-portal-api-server /app/divoc-portal-api-server @@ -60,7 +60,7 @@ EXPOSE 8001 CMD ["/app/divoc-portal-api-server", "--scheme", "http", "--port", "8001", "--host", "0.0.0.0"] #registration api -FROM alpine:3.9 as registration_api +FROM alpine:3.17 as registration_api LABEL name=registration_api RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/registration_api/divoc-registration-api-server /app/divoc-registration-api-server @@ -69,7 +69,7 @@ EXPOSE 8002 CMD ["/app/divoc-registration-api-server", "--scheme", "http", "--port", "8002", "--host", "0.0.0.0"] #notification-service -FROM alpine:3.9 as notification-service +FROM alpine:3.17 as notification-service LABEL name=notification-service RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/notification-service/notification-service /app/notification-service @@ -78,7 +78,7 @@ EXPOSE 8765 CMD ["/app/notification-service", "--scheme", "http", "--port", "8765", "--host", "0.0.0.0"] #digilocker_support_api -FROM alpine:3.9 as digilocker_support_api +FROM alpine:3.17 as digilocker_support_api LABEL name=digilocker_support_api RUN apk add ca-certificates COPY --from=build_base /tmp/divoc/vaccination_api/digilocker_support_api /app/digilocker_support_api