Skip to content

Comments

updating to address vulnerabilities#96

Merged
rickredondo merged 3 commits intomainfrom
update-dockerfile
Jul 24, 2025
Merged

updating to address vulnerabilities#96
rickredondo merged 3 commits intomainfrom
update-dockerfile

Conversation

@rickredondo
Copy link
Collaborator

Update Dockerfile to use node:22-alpine and latest serve

@rickredondo rickredondo changed the title updating to address vulerabilities updating to address vulnerabilities Jul 23, 2025
@rickredondo rickredondo requested a review from a team July 24, 2025 15:28
Copy link
Contributor

@marisimon marisimon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Nothing blocking :)

We will see if the bot runs once it is merged into main to merge it into small-image. Otherwise, will need a different PR for that.

@rickredondo rickredondo merged commit c8cd4b3 into main Jul 24, 2025
Copy link

@Rahul-cyber26 Rahul-cyber26 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#97

@@ -1,5 +1,5 @@
# Start your image with a node base image
FROM node:18-alpine
FROM node:22-alpine

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#96 node:22-alpine

# Install node packages, install serve, build the app, and remove dependencies at the end
RUN npm install \
&& npm install -g serve \
&& npm install -g serve@latest \

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The selected line changes the installation of the global serve package to always use its latest version by specifying serve@latest instead of just serve, which would have installed the default version available at the time. This ensures that the Docker image will always have the most up-to-date version of serve when built.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants