Merge pull request #312 from lenny-intel/cve

fix: Address CVE in Alpine base image
edgexfoundry · Nov 14, 2023 · 6e9e828 · 6e9e828
2 parents 9ebfee9 + 32f25ed
commit 6e9e828
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -45,6 +45,8 @@ LABEL license='SPDX-License-Identifier: Apache-2.0' \
 
 # dumb-init needed for injected secure bootstrapping entrypoint script when run in secure mode.
 RUN apk add --update --no-cache dumb-init ffmpeg udev
+# Ensure using latest versions of all installed packages to avoid any recent CVEs
+RUN apk --no-cache upgrade
 
 WORKDIR /
 COPY --from=builder /device-usb-camera/cmd /