lucasrguerra/pss
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

fix(docker): corrige as vulnerabilidades da imagem final (apk upgrade; sem npm no runtime)
Release / Plano (reaproveitar a imagem?) (push) Successful in 6s
Details
CI / Tipos e testes (push) Successful in 1m0s
Details
CI / Trivy (dependências e segredos) (push) Successful in 6s
Details
CI / Imagem Docker (linux/arm64) (push) Failing after 37s
Details
Release / ci (push) Failing after 1m44s
Details
Release / Publica a imagem (linux/arm64) (push) Skipped
Details
Release / Cria a release no Gitea (push) Skipped
Details

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Lucas RayanandClaude Sonnet 5.5 committed 2026-11-01 21:49:49 -03:00
1 parent 522805c826
commit b43bd5e37a
1 file changed
+3
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+3
View File
@@ -10,6 +10,9 @@ RUN npm run build
# ── Imagem final: nginx sem privilégios (usuário nginx, porta 8080) e os estáticos ── # ── Imagem final: nginx sem privilégios (usuário nginx, porta 8080) e os estáticos ──
FROM nginxinc/nginx-unprivileged:alpine FROM nginxinc/nginx-unprivileged:alpine
# Aplica as correções de segurança do Alpine publicadas depois da imagem base.
USER root
RUN apk upgrade --no-cache
COPY nginx.conf /etc/nginx/conf.d/default.conf COPY nginx.conf /etc/nginx/conf.d/default.conf
COPY --from=build /app/dist /usr/share/nginx/html COPY --from=build /app/dist /usr/share/nginx/html