Skip to content

Commit

Permalink
Update Redhat image package to resolve CVE-2022-1271
Browse files Browse the repository at this point in the history
  • Loading branch information
jtuttle committed Apr 29, 2022
1 parent 73baa7f commit 0d17de4
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ RUN go build -ldflags="-X github.com/cyberark/secretless-broker/pkg/secretless.T


# =================== MAIN CONTAINER ===================
FROM alpine:3.14 as secretless-broker
FROM alpine:3.15 as secretless-broker
MAINTAINER CyberArk Software Ltd.

RUN apk add -u shadow libc6-compat openssl && \
Expand Down Expand Up @@ -94,6 +94,9 @@ LABEL summary="Secure your apps by making them Secretless"
LABEL description="Secretless Broker is a connection broker which relieves client \
applications of the need to directly handle secrets to target services"

# Update packages to get CVE fixes
RUN dnf update -y

# Add Limited user
RUN groupadd -r secretless \
-g 777 && \
Expand Down

0 comments on commit 0d17de4

Please sign in to comment.