|
1 | 1 | ###############################################################################
|
2 | 2 | FROM gradle:8.10.0-jdk22-alpine AS base
|
3 | 3 |
|
4 |
| -ENV WORKDIR=/app |
5 |
| -WORKDIR ${WORKDIR} |
| 4 | +RUN apk add --update --no-cache make \ |
| 5 | + # FIX CVE-2024-5535 |
| 6 | + && apk upgrade --update --no-cache openssl libcrypto3 libssl3 \ |
| 7 | + # FIX CVE-2024-5535 CVE-2024-4741 |
| 8 | + && apk upgrade --update --no-cache --available |
6 | 9 |
|
7 |
| -RUN apk add --update --no-cache make |
8 |
| -RUN apk upgrade --update --no-cache openssl libcrypto3 libssl3 # FIX CVE-2024-5535 |
9 |
| -RUN apk upgrade --update --no-cache --available # FIX CVE-2024-5535 CVE-2024-4741 |
| 10 | + ENV WORKDIR=/app |
| 11 | +WORKDIR ${WORKDIR} |
10 | 12 |
|
11 | 13 | ###############################################################################
|
12 | 14 | FROM base AS lint
|
13 | 15 |
|
14 | 16 | ENV WORKDIR=/app
|
15 | 17 | WORKDIR ${WORKDIR}
|
16 | 18 |
|
17 |
| -RUN apk add --update --no-cache make nodejs npm |
18 |
| -RUN apk add --update --no-cache yamllint |
19 |
| - |
20 |
| -RUN npm install -g --ignore-scripts markdownlint-cli |
| 19 | +RUN apk add --update --no-cache make nodejs npm\ |
| 20 | + && apk add --update --no-cache yamllint \ |
| 21 | + && npm install -g --ignore-scripts markdownlint-cli |
21 | 22 |
|
22 | 23 | # [!TIP] Use a bind-mount to "/app" to override following "copys"
|
23 | 24 | # for lint and test against "current" sources in this stage
|
@@ -94,19 +95,22 @@ CMD ["make", "test"]
|
94 | 95 | ## WORKDIR and USER are maintained
|
95 | 96 | ##
|
96 | 97 | FROM eclipse-temurin:22.0.2_9-jre-alpine AS production
|
97 |
| -RUN apk upgrade --update --no-cache openssl libcrypto3 libssl3 # FIX CVE-2024-5535 |
98 |
| -RUN apk upgrade --update --no-cache --available # FIX CVE-2024-5535 CVE-2024-4741 |
| 98 | + |
| 99 | +RUN apk add --update --no-cache make \ |
| 100 | + # FIX CVE-2024-5535 |
| 101 | + && apk upgrade --update --no-cache openssl libcrypto3 libssl3 \ |
| 102 | + # FIX CVE-2024-5535 CVE-2024-4741 |
| 103 | + && apk upgrade --update --no-cache --available |
99 | 104 |
|
100 | 105 | ENV LOG_LEVEL=INFO
|
101 | 106 | ENV BRUTEFORCE=false
|
102 | 107 | ENV WORKDIR=/app
|
103 | 108 | WORKDIR ${WORKDIR}
|
104 | 109 |
|
105 |
| -RUN adduser -D worker |
106 |
| -RUN mkdir -p /app |
107 |
| -RUN chown worker:worker /app |
| 110 | +RUN adduser -D worker \ |
| 111 | + && mkdir -p /app \ |
| 112 | + && chown worker:worker /app |
108 | 113 |
|
109 |
| -RUN apk add --update --no-cache make |
110 | 114 | COPY ./Makefile ${WORKDIR}/
|
111 | 115 | COPY --from=builder /app/algorithm-exercises-java/build/libs/algorithm-exercises-java.jar ${WORKDIR}/algorithm-exercises-java.jar
|
112 | 116 |
|
|
0 commit comments