feat: runs apk upgrade for security updates (#65)

inclusive-design · Oct 21, 2024 · a588e02 · a588e02
1 parent 0ce0808
commit a588e02
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -4,7 +4,11 @@ WORKDIR /usr/src/app
 
 COPY package*.json ./
 
-RUN npm i
+# Do not remove the 'apk update && apk upgrade' commands below. Workaround for installing latest
+# Alpine security updates in case upstream images don't get built and pushed regularly.
+RUN apk update && \
+    apk upgrade --no-cache && \
+    npm i
 
 COPY . .