Skip to content

Commit fc8984a

Browse files
committed
chore: fix docker vulnerabilities
1 parent 7c9336d commit fc8984a

1 file changed

Lines changed: 2 additions & 3 deletions

File tree

Dockerfile

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,8 @@ ENV CGO_ENABLED=0 \
1313
GOARCH=$TARGETARCH \
1414
VERSION=$VERSION
1515

16+
RUN apk add --no-cache ca-certificates tzdata
17+
1618
# Dependency cache: only re-run when go.mod/go.sum change
1719
COPY go.mod go.sum ./
1820
RUN --mount=type=cache,target=/go/pkg/mod \
@@ -52,8 +54,6 @@ ARG TARGETARCH=amd64
5254
COPY --from=go-builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
5355
# Timezone data
5456
COPY --from=go-builder /usr/share/zoneinfo /usr/share/zoneinfo
55-
# passwd entry for non-root user
56-
COPY --from=go-builder /etc/passwd /etc/passwd
5757

5858
WORKDIR /authorizer
5959
COPY --from=node-builder /authorizer/web/app/build web/app/build
@@ -63,6 +63,5 @@ COPY --from=node-builder /authorizer/web/dashboard/favicon_io web/dashboard/favi
6363
COPY --from=go-builder /authorizer/build/linux/${TARGETARCH}/authorizer ./authorizer
6464
COPY web/templates web/templates
6565
EXPOSE 8080 8081
66-
USER 65534
6766
ENTRYPOINT [ "./authorizer" ]
6867
CMD []

0 commit comments

Comments
 (0)