Merge pull request #44 from cyber-dojo/upgrade-base-image-5

Dockerfile: upgrade base image to move past new libexpat snyk vulnera…
cyber-dojo · Sep 6, 2024 · e85995f · e85995f
2 parents ba34416 + 3d1bf78
commit e85995f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.snyk b/.snyk
@@ -10,3 +10,8 @@ ignore:
         reason: No fix available
         expires: 2024-10-03T10:03:36.581Z
         created: 2024-09-03T10:03:36.589Z
+    SNYK-ALPINE320-OPENSSL-7895537:
+    - '*':
+        reason: No fix available
+        expires: 2024-10-06T10:03:36.581Z
+        created: 2024-09-06T10:03:36.589Z
diff --git a/Dockerfile b/Dockerfile
@@ -6,6 +6,8 @@ RUN gem install --no-document 'concurrent-ruby'
 
 RUN apk add curl # https://security.snyk.io/vuln/SNYK-ALPINE320-CURL-7838598
 
+RUN apk add libexpat=2.6.3-r0  # https://security.snyk.io/vuln/SNYK-ALPINE319-EXPAT-7908399
+
 WORKDIR /runner
 COPY . .