diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a8aa59b..bf5d625 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -39,12 +39,12 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Initialize CodeQL - uses: github/codeql-action/init@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7 + uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7 + uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9 with: category: "/language:${{ matrix.language }}" diff --git a/Dockerfile b/Dockerfile index 46e8020..4f3caf5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM myrotvorets/node-build:latest@sha256:5b811ef66c70b2d9ffb595d0480df2e5d0aa02025fa39e824475d213846663b2 AS build +FROM myrotvorets/node-build:latest@sha256:b2f7349f299902f849e229dfa704ed5e3a04f2aa7db7babf78b543abc7038ec8 AS build USER root WORKDIR /srv/service RUN chown nobody:nobody /srv/service && apk add --no-cache vips-dev @@ -13,7 +13,7 @@ COPY --chown=nobody:nobody ./src ./src RUN npm run build -- --declaration false --removeComments true --sourceMap false RUN npm prune --omit=dev -FROM myrotvorets/node-min@sha256:902b16bd28738964ff63535810b868d137e103e45762d4b824ce87dc91a0f04f +FROM myrotvorets/node-min@sha256:1810d7a471b7422da7053c515c109908e0f5c32de79b4f79b95d3c37e9412358 USER root WORKDIR /srv/service RUN chown nobody:nobody /srv/service && apk add --no-cache vips vips-cpp