update all packages each build to avoid CVEs (sourcegraph#150)

openserini · Sep 10, 2021 · 1a4a28c · 1a4a28c
1 parent 62b7b9a
commit 1a4a28c
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/Dockerfile.indexserver b/Dockerfile.indexserver
@@ -1,6 +1,7 @@
 FROM alpine
 
-RUN apk add --no-cache ca-certificates bind-tools tini git
+RUN apk update --no-cache && apk upgrade --no-cache && \
+    apk add --no-cache ca-certificates bind-tools tini git
 
 # Run as non-root user sourcegraph. External volumes should be mounted under /data (which will be owned by sourcegraph).
 RUN mkdir -p /home/sourcegraph

diff --git a/Dockerfile.webserver b/Dockerfile.webserver
@@ -1,6 +1,7 @@
 FROM alpine
 
-RUN apk add --no-cache ca-certificates bind-tools tini
+RUN apk update --no-cache && apk upgrade --no-cache && \
+   apk add --no-cache ca-certificates bind-tools tini
 
 # Run as non-root user sourcegraph. External volumes should be mounted under /data (which will be owned by sourcegraph).
 RUN mkdir -p /home/sourcegraph