From d3a02bb36bd34e129ed4fe0ce32b7bf752464574 Mon Sep 17 00:00:00 2001
From: Emterry <emma.terry@digital.justice.gov.uk>
Date: Thu, 5 Dec 2024 14:34:46 +0000
Subject: [PATCH] trivy

---
 Dockerfile       | 4 ++--
 requirements.txt | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 0d932c95b..e332c7b6c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,7 +10,7 @@ RUN ./node_modules/.bin/sass --load-path=./ --style=compressed src/app.scss:dist
 WORKDIR /src
 RUN /node_modules/.bin/jest
 
-FROM public.ecr.aws/docker/library/python:3.12-alpine3.21 AS base
+FROM public.ecr.aws/docker/library/python:3.12-alpine3.18 AS base
 
 ARG HELM_VERSION=3.14.1
 ARG HELM_TARBALL=helm-v${HELM_VERSION}-linux-amd64.tar.gz
@@ -26,7 +26,7 @@ ENV DJANGO_SETTINGS_MODULE="controlpanel.settings" \
 RUN addgroup -g 1000 controlpanel \
     && adduser -G controlpanel -u 1000 controlpanel -D
 
-RUN apk update \
+RUN apk update && apk upgrade \
     && apk add --no-cache \
         postgresql-client \
         wget \
diff --git a/requirements.txt b/requirements.txt
index 572665c67..5a579bc70 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -31,7 +31,7 @@ PyNaCl==1.5.0
 pytest==8.0.0
 pytest-django==4.8.0
 python-dotenv==1.0.1
-python-jose==3.3.1
+python-jose==3.3.0
 pyyaml==6.0.1
 rules==3.3
 sentry-sdk==2.17.0