ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-31 07:44:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(container): clear the Private Cloud image vulnerabilities (PROWLER-2291) (#12307)

Browse Source 
Co-authored-by: César Arroba <19954079+cesararroba@users.noreply.github.com>
Co-authored-by: César Arroba <cesar@prowler.com>
This commit is contained in:
Prowler BotCésar ArrobaCésar Arroba
 authored and GitHub committed 2026-08-04 10:05:59 +02:00
1 parent ca9feed805
commit fbbf9fe1cd
24 files changed
+585 -729
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

ui/Dockerfile
+1 -1
View File
@@ -6,7 +6,7 @@ LABEL maintainer="https://github.com/prowler-cloud"
# Patch Alpine OpenSSL runtime packages before all stages inherit the base image.
# The build uses pnpm via corepack, so npm is unused — remove it (and npx) to drop
# the bundled-npm CVE surface (node-tar CVE-2026-59873) from every stage, incl. prod.
RUN apk upgrade --no-cache libcrypto3 libssl3 && corepack enable && rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx
RUN apk upgrade --no-cache libcrypto3 libssl3 musl musl-utils zlib && corepack enable && rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx
# Install dependencies only when needed
FROM base AS deps