⬆️(docker) upgrade to recommended version

Docker DX linter and trivy were pointing
vulnerabilities in our Dockerfile.
We bumped the base image to a more secure version.
This commit is contained in:
Anthony LC 2025-05-15 16:13:06 +02:00
parent dd6e0b5072
commit 9aa0cb7788
No known key found for this signature in database
3 changed files with 7 additions and 6 deletions

View file

@ -1,7 +1,7 @@
# Django impress
# ---- base image to inherit from ----
FROM python:3.12.6-alpine3.20 AS base
FROM python:3.12.10-alpine AS base
# Upgrade pip to its latest release to speed up dependencies installation
RUN python -m pip install --upgrade pip setuptools
@ -30,12 +30,13 @@ RUN mkdir /install && \
# ---- mails ----
FROM node:20 AS mail-builder
FROM node:24-alpine AS mail-builder
COPY ./src/mail /mail/app
WORKDIR /mail/app
RUN apk update && apk add --no-cache bash
RUN yarn install --frozen-lockfile && \
yarn build

View file

@ -1,4 +1,4 @@
FROM node:20-alpine AS frontend-deps
FROM node:24-alpine AS frontend-deps
WORKDIR /home/frontend/
@ -45,7 +45,7 @@ ENV NEXT_PUBLIC_PUBLISH_AS_MIT=${PUBLISH_AS_MIT}
RUN yarn build
# ---- Front-end image ----
FROM nginxinc/nginx-unprivileged:1.26-alpine AS frontend-production
FROM nginxinc/nginx-unprivileged:1.27-alpine AS frontend-production
# Un-privileged user running the application
ARG DOCKER_USER

View file

@ -1,4 +1,4 @@
FROM node:20-alpine AS y-provider-builder
FROM node:24-alpine AS y-provider-builder
WORKDIR /home/frontend/
@ -15,7 +15,7 @@ COPY ./src/frontend/servers/y-provider ./servers/y-provider
WORKDIR /home/frontend/servers/y-provider
RUN yarn build
FROM node:20-alpine AS y-provider
FROM node:24-alpine AS y-provider
WORKDIR /home/frontend/