From c9d1bc79cabb0cfb46a465901f1de666f0b1faad Mon Sep 17 00:00:00 2001 From: ddl-ebrown Date: Sat, 20 Jan 2024 16:41:25 -0800 Subject: [PATCH] Use maintained nodejs18-debian12 base image - The nodejs distroless image was last updated 10 months ago and as such there are a number of high severity CVEs present in the last flyteconsole image that shipped v1.10.2 - The existing base image is based on node v18, so for compatibility use the gcr.io/distroless/nodejs18-debian12 image, which is being actively maintained: https://github.com/GoogleContainerTools/distroless/blob/main/nodejs/README.md --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 58127cd42..a5ae37172 100644 --- a/Dockerfile +++ b/Dockerfile @@ -19,7 +19,7 @@ RUN : \ && mkdir /app \ && cp -R ./website/dist/* /app -FROM gcr.io/distroless/nodejs +FROM gcr.io/distroless/nodejs18-debian12 LABEL org.opencontainers.image.source https://github.com/flyteorg/flyteconsole COPY --from=builder /app app