mirror of
https://github.com/jambonz/sbc-sip-sidecar.git
synced 2026-01-24 22:27:52 +00:00
8d87758378
This PR upgrades node base image to node:18.14.0-alpine3.16
This fixes:
Critical vulnerability:
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
High vulnerability:
CWE-416: Double Free
CWE-416: Use After Free
24 lines
349 B
Docker
24 lines
349 B
Docker
FROM --platform=linux/amd64 node:18.14.0-alpine3.16 as base
|
|
|
|
RUN apk --update --no-cache add --virtual .builds-deps build-base python3
|
|
|
|
WORKDIR /opt/app/
|
|
|
|
FROM base as build
|
|
|
|
COPY package.json package-lock.json ./
|
|
|
|
RUN npm ci
|
|
|
|
COPY . .
|
|
|
|
FROM base
|
|
|
|
COPY --from=build /opt/app /opt/app/
|
|
|
|
ARG NODE_ENV
|
|
|
|
ENV NODE_ENV $NODE_ENV
|
|
|
|
CMD [ "node", "app.js" ]
|