Merge pull request #2437 from bcgov/2418-investigate-and-fix-critical-and-high-severity-security-secrets-issues-5

Add update/upgrade to make sure we get latest

Author: trslater

alcs-frontend/Dockerfile

@@ -53,7 +53,7 @@ ENV ENABLED_CONNECT_SRC=" 'self' http://localhost:* nrs.objectstore.gov.bc.ca"
 ENV MAINTENANCE_MODE="false"
 
 # Update libxml2 to patch the security vulnerabilities
-RUN apk add --no-cache libxml2
+RUN apk update && apk add --no-cache libxml2 && apk upgrade --available
 
 # When the container starts, replace the settings.json with values from environment variables
 ENTRYPOINT [ "./init.sh" ]

portal-frontend/Dockerfile

@@ -50,7 +50,7 @@ RUN chmod -R go+rwx /usr/share/nginx/html/assets
 ENV ENABLED_CONNECT_SRC=" 'self' http://localhost:* nrs.objectstore.gov.bc.ca"
 
 # Update libxml2 to patch the security vulnerabilities
-RUN apk add --no-cache libxml2
+RUN apk update && apk add --no-cache libxml2 && apk upgrade --available
 
 # When the container starts, replace the settings.json with values from environment variables
 ENTRYPOINT [ "./init.sh" ]