docker: bump alpine base image to v3.17 (cs3org#3703)

gmgigi96 · Jun 28, 2023 · de30c76 · de30c76
1 parent bfb1401
commit de30c76
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 3 deletions.
diff --git a/changelog/unreleased/security-update-docker-base.md b/changelog/unreleased/security-update-docker-base.md
@@ -0,0 +1,6 @@
+Enhancement: Bump reva(d) base image to alpine 3.17
+
+Prevents several vulnerabilities from the base image itself:
+  https://artifacthub.io/packages/helm/cs3org/revad?modal=security-report
+
+https://github.com/cs3org/reva/pull/3703
diff --git a/docker/Dockerfile.reva b/docker/Dockerfile.reva
@@ -16,7 +16,7 @@
 # granted to it by virtue of its status as an Intergovernmental Organization
 # or submit itself to any jurisdiction.
 
-FROM golang:alpine3.16 as builder
+FROM golang:alpine3.17 as builder
 
 RUN apk --no-cache add \
   ca-certificates \

diff --git a/docker/Dockerfile.revad b/docker/Dockerfile.revad
@@ -16,7 +16,7 @@
 # granted to it by virtue of its status as an Intergovernmental Organization
 # or submit itself to any jurisdiction.
 
-FROM golang:alpine3.16 as builder
+FROM golang:alpine3.17 as builder
 
 WORKDIR /home/reva
 COPY . .

diff --git a/docker/Dockerfile.revad-eos b/docker/Dockerfile.revad-eos
@@ -16,7 +16,7 @@
 # granted to it by virtue of its status as an Intergovernmental Organization
 # or submit itself to any jurisdiction.
 
-FROM golang:alpine3.16 as builder
+FROM golang:alpine3.17 as builder
 
 WORKDIR /home/reva
 COPY . .