From e9a15c7645ff641c2af7ae73a966d842fb068d10 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 8 Aug 2023 18:29:44 +0000 Subject: [PATCH] fix: Dockerfile.offline to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-5776808 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-5776808 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-5788370 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-5788370 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-5821142 --- Dockerfile.offline | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile.offline b/Dockerfile.offline index 73df640..78581a3 100644 --- a/Dockerfile.offline +++ b/Dockerfile.offline @@ -4,7 +4,7 @@ WORKDIR / COPY . / RUN make build -FROM alpine:latest as schemas +FROM alpine:3.18.3 as schemas RUN apk --no-cache add git RUN git clone --depth 1 https://github.com/instrumenta/kubernetes-json-schema.git RUN git clone --depth 1 https://github.com/garethr/openshift-json-schema.git @@ -13,7 +13,7 @@ FROM schemas as standalone-schemas RUN cd kubernetes-json-schema/master && \ find -maxdepth 1 -type d -not -name "." -not -name "*-standalone*" | xargs rm -rf -FROM alpine:latest +FROM alpine:3.18.3 RUN apk --no-cache add ca-certificates COPY --from=builder /bin/kubeval . COPY --from=standalone-schemas /kubernetes-json-schema /schemas/kubernetes-json-schema/master