fix(deps): pin urllib3>=2.7.0 and idna>=3.15; apk upgrade in nginx stage; form-data override
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
This commit is contained in:
@@ -34,6 +34,9 @@ RUN npm run build
|
||||
# ── Production Stage ───────────────────────────────────────────────────────
|
||||
FROM nginx:1.31.1-alpine3.23-slim AS production
|
||||
|
||||
# Patch Alpine system packages (resolves openssl CVEs in base image)
|
||||
RUN apk update && apk upgrade --no-cache
|
||||
|
||||
# Copy built files to nginx
|
||||
COPY --from=build /app/dist /usr/share/nginx/html
|
||||
|
||||
|
||||
Reference in New Issue
Block a user