dockerfile:fix - update and upgrade packages (#977)

Previously we was not updating the installed packages of alpine, which could cause vulnerability issues, as the image used may contain outdated packages. Signed-off-by: Matheus Alcantara <matheus.alcantara@zup.com.br> (cherry picked from commit 22acb2b)
ZupIT · Feb 10, 2022 · 8086bdc · 8086bdc
1 parent a02cb68
commit 8086bdc
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/deployments/Dockerfile b/deployments/Dockerfile
@@ -25,6 +25,8 @@ RUN env GOOS=linux go build -ldflags '-s -w' -o /bin/horusec ./cmd/app/main.go
 
 FROM docker:20.10-git
 
+RUN apk update && apk upgrade
+
 COPY --from=builder /bin/horusec /usr/local/bin
 RUN chmod +x /usr/local/bin/horusec
 

diff --git a/deployments/Dockerfile-gorelease-amd64 b/deployments/Dockerfile-gorelease-amd64
@@ -14,6 +14,8 @@
 
 FROM docker:20.10-git
 
+RUN apk update && apk upgrade
+
 COPY /horusec_linux_amd64 /usr/local/bin/horusec
 
 CMD [ "sh" ]
diff --git a/deployments/Dockerfile-gorelease-arm64 b/deployments/Dockerfile-gorelease-arm64
@@ -14,6 +14,8 @@
 
 FROM docker:20.10-git
 
+RUN apk update && apk upgrade
+
 COPY /horusec_linux_arm64 /usr/local/bin/horusec
 
 CMD [ "sh" ]