mirror of
https://github.com/jambonz/jambonz-webapp.git
synced 2026-07-23 04:21:58 +00:00
EgleH
a75ea8fe5c
This PR upgrades node base image to node:18.14.0-alpine3.16
This fixes:
Critical vulnerability:
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
High vulnerability:
CWE-416: Double Free
CWE-416: Use After Free
24 lines
385 B
Docker
24 lines
385 B
Docker
FROM --platform=linux/amd64 node:18.14.0-alpine3.16 as base
|
|
|
|
RUN apk --update --no-cache add --virtual .builds-deps build-base curl python3
|
|
|
|
WORKDIR /opt/app/
|
|
|
|
FROM base as build
|
|
|
|
COPY package.json package-lock.json ./
|
|
|
|
RUN npm ci
|
|
|
|
COPY . .
|
|
|
|
RUN npm run build
|
|
|
|
FROM base
|
|
|
|
COPY --from=build /opt/app /opt/app/
|
|
|
|
RUN chmod +x /opt/app/entrypoint.sh
|
|
|
|
ENTRYPOINT ["/opt/app/entrypoint.sh"]
|