fix: update npm in production images to resolve crossspawn vuln

snyk · Jan 15, 2025 · 632a899 · 632a899
1 parent f17a9c1
commit 632a899
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -30,6 +30,8 @@ RUN apk update
 RUN apk upgrade
 RUN apk --no-cache add dumb-init skopeo curl bash python3
 
+RUN npm install -g [email protected]
+
 RUN addgroup -S -g 10001 snyk
 RUN adduser -S -G snyk -h /srv/app -u 10001 snyk
 

diff --git a/Dockerfile.ubi9 b/Dockerfile.ubi9
@@ -60,6 +60,7 @@ COPY LICENSE /licenses/LICENSE
 ENV NODE_ENV=production
 
 RUN yum upgrade -y
+RUN npm install -g [email protected]
 
 WORKDIR /srv/app