Skip to content

Commit de65ce2

Browse files
authored
Merge pull request #189 from SamMayWork/fix-cves
Upgrade to NextJS 11 to fix CVEs
2 parents a181e0e + b5b5fd3 commit de65ce2

3 files changed

Lines changed: 1581 additions & 1104 deletions

File tree

Dockerfile

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
ARG BASE_IMAGE
22
ARG BUILD_IMAGE
33

4-
FROM ${BUILD_IMAGE} as build
4+
FROM ${BUILD_IMAGE} AS build
55
USER node
66
WORKDIR /home/node
77
ADD --chown=node:node package*.json ./
88
RUN npm install
99
ADD --chown=node:node . .
1010
RUN npm run build
1111

12-
FROM ${BUILD_IMAGE} as solidity-build
12+
FROM ${BUILD_IMAGE} AS solidity-build
1313
RUN apk update && apk add --no-cache python3 alpine-sdk
1414
USER node
1515
WORKDIR /home/node
@@ -18,16 +18,16 @@ RUN npm install
1818
ADD --chown=node:node ./samples/solidity .
1919
RUN npx hardhat compile
2020

21-
FROM alpine:3.19 AS SBOM
21+
FROM alpine:3.19 AS sbom
2222
WORKDIR /
2323
ADD . /SBOM
2424
RUN apk add --no-cache curl
25-
RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.48.3
25+
RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin latest
2626
RUN trivy fs --format spdx-json --output /sbom.spdx.json /SBOM
2727
RUN trivy sbom /sbom.spdx.json --severity UNKNOWN,HIGH,CRITICAL --exit-code 1
2828

2929
FROM $BASE_IMAGE
30-
RUN apk add curl=~8.12 jq=~1.7
30+
RUN apk add --no-cache curl jq
3131
RUN mkdir -p /app/contracts/source \
3232
&& chgrp -R 0 /app/ \
3333
&& chmod -R g+rwX /app/ \

0 commit comments

Comments
 (0)