jason.woltje/professional-website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(docker): remove bundled npm from runner to clear Trivy CVEs (#4)
All checks were successful
ci/woodpecker/push/web Pipeline was successful
Details

Browse Source 
Co-authored-by: Jason Woltje <jason@diversecanvas.com>
Co-committed-by: Jason Woltje <jason@diversecanvas.com>
This commit was merged in pull request #4.
This commit is contained in:
Jason Woltje
2026-04-14 03:49:54 +00:00
committed by jason.woltje
parent 261c0019bb
commit 6db28bc81f
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile
View File

@@ -40,6 +40,8 @@ ENV NODE_ENV=production \
RUN addgroup -g 1001 -S nodejs && adduser -S -u 1001 -G nodejs nextjs RUN addgroup -g 1001 -S nodejs && adduser -S -u 1001 -G nodejs nextjs
RUN apk upgrade --no-cache && \ RUN apk upgrade --no-cache && \
apk add --no-cache wget && \ apk add --no-cache wget && \
rm -rf /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/corepack \
/usr/local/bin/npm /usr/local/bin/npx /usr/local/bin/corepack && \
mkdir -p /app/media && \ mkdir -p /app/media && \
chown -R nextjs:nodejs /app chown -R nextjs:nodejs /app
COPY --from=build --chown=nextjs:nodejs /app/public ./public COPY --from=build --chown=nextjs:nodejs /app/public ./public