Merge pull request #760 from pjbgf/use-edge-gpg

build: Bump gpg to alpine's edge
fluxcd · Nov 9, 2022 · 9582513 · 9582513
2 parents 47073a3 + d8e820b
commit 9582513
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -33,7 +33,9 @@ RUN xx-go build -trimpath -a -o kustomize-controller main.go
 
 FROM alpine:3.16
 
-RUN apk add --no-cache ca-certificates tini git openssh-client gnupg
+# Uses GnuPG from edge to patch CVE-2022-3515.
+RUN apk add --no-cache ca-certificates tini git openssh-client && \
+	apk add --no-cache gnupg --repository=https://dl-cdn.alpinelinux.org/alpine/edge/main
 
 COPY --from=builder /workspace/kustomize-controller /usr/local/bin/