From e4c3e786a4a983dc29ffca5883cd6e5ace9dfdb9 Mon Sep 17 00:00:00 2001 From: Diogo Kiss Date: Tue, 3 May 2022 10:18:17 +0200 Subject: [PATCH] build: upgrade base Docker image to prevent security vulnerability According to Snyk.io, the currently used base Docker image has 19 security vulnerabilities (13 high). https://snyk.io/test/docker/node%3A16.5.0-alpine3.14 On the other hand, the image `node:16.14.2-alpine3.14` has no known security vulnerabilies. https://snyk.io/test/docker/node%3A16.14.2-alpine3.14 This commit upgrades the image to fix the above mentioned issues. --- Dockerfile | 2 +- package-lock.json | 2 +- package.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 3593997a..ffa7c22a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM node:16.5.0-alpine3.14 as build +FROM node:16.14.2-alpine3.14 as build COPY package*.json / diff --git a/package-lock.json b/package-lock.json index 153495fb..ba32dc86 100644 --- a/package-lock.json +++ b/package-lock.json @@ -56,7 +56,7 @@ "yaml": "^2.0.1" }, "engines": { - "node": "16.5.0" + "node": "v16.14.2" } }, "node_modules/@actions/core": { diff --git a/package.json b/package.json index cddb34db..1a10851a 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,7 @@ "build": "rollup -c" }, "engines": { - "node": "16.5.0" + "node": "v16.14.2" }, "repository": { "type": "git",