Skip to content

Commit ce92704

Browse files
build: fix security vulnerabilities (#54)
This upgrades base images with fixes to security vulnerabilities.
1 parent b999c04 commit ce92704

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

Dockerfile

+5-5
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
1-
ARG DOCKER_VERSION=24.0.6
1+
ARG DOCKER_VERSION=25.0.4
22

33
# dind-cleaner
4-
FROM golang:1.21-alpine3.18 AS cleaner
4+
FROM golang:1.22-alpine3.19 AS cleaner
55

66
COPY cleaner/dind-cleaner/* /go/src/github.com/codefresh-io/dind-cleaner/
77
WORKDIR /go/src/github.com/codefresh-io/dind-cleaner/
@@ -15,16 +15,16 @@ RUN CGO_ENABLED=0 go build -o /usr/local/bin/dind-cleaner ./cmd && \
1515
rm -rf /go/*
1616

1717
# bbolt
18-
FROM golang:1.21-alpine3.18 AS bbolt
18+
FROM golang:1.22-alpine3.19 AS bbolt
1919
RUN go install go.etcd.io/bbolt/cmd/bbolt@latest
2020

2121
# node-exporter
22-
FROM quay.io/prometheus/node-exporter:v1.6.1 AS node-exporter
22+
FROM quay.io/prometheus/node-exporter:v1.7.0 AS node-exporter
2323

2424
# Main
2525
FROM docker:${DOCKER_VERSION}-dind
2626

27-
RUN echo 'http://dl-cdn.alpinelinux.org/alpine/v3.11/main' >> /etc/apk/repositories \
27+
RUN echo 'http://dl-cdn.alpinelinux.org/alpine/v3.19/main' >> /etc/apk/repositories \
2828
&& apk upgrade \
2929
# Add fuse-overlayfs for comaptibility with rootless. Volumes created with rootless might use fuse-overlay formatted volumes. If those volumes are later used by dind that runs with root it'll require fuse-overlay to be able to read the volume
3030
&& apk add bash fuse-overlayfs jq --no-cache \

service.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
version: 1.28.3
1+
version: 1.28.4

0 commit comments

Comments
 (0)