From 7d77087e1fb0db72f4f15f00aed5e54dbad23c4d Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 10 Jan 2026 07:23:34 +0000 Subject: [PATCH] fix: cmd/core-command/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091698 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091698 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091698 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091701 - https://snyk.io/vuln/SNYK-ALPINE322-BUSYBOX-14091701 --- cmd/core-command/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/core-command/Dockerfile b/cmd/core-command/Dockerfile index 42867c8fd1..f1e6e51018 100644 --- a/cmd/core-command/Dockerfile +++ b/cmd/core-command/Dockerfile @@ -32,7 +32,7 @@ RUN [ ! -d "vendor" ] && go mod download all || echo "skipping..." COPY . . RUN make -e ADD_BUILD_TAGS=$ADD_BUILD_TAGS cmd/core-command/core-command -FROM alpine:3.22 +FROM alpine:3.23.2 RUN apk add --update --no-cache dumb-init # Ensure using latest versions of all installed packages to avoid any recent CVEs