CR-13216 (#105)

* CR-13216 - migrating from alpine to debian * upgrade to node:16.18.1 to handle security vulns * update node version for testing * fix Co-authored-by: danielm-codefresh <[email protected]>
codefresh-io · Nov 13, 2022 · 8794f20 · 8794f20
1 parent d4fc9b5
commit 8794f20
Show file tree

Hide file tree

Showing 4 changed files with 13 additions and 14 deletions.
diff --git a/.nvmrc b/.nvmrc
@@ -1 +1 @@
-v16.16.0
+v16.18.1
diff --git a/Dockerfile b/Dockerfile
@@ -1,26 +1,25 @@
-FROM node:16.16.0-alpine3.16
+FROM node:16.18.1-bullseye-slim
 
 WORKDIR /root/cf-runtime
 
-RUN apk -U upgrade
+RUN apt-get update && apt upgrade -y
 
 COPY package.json yarn.lock ./
 
 # install cf-runtime required binaries
-RUN apk add --no-cache --virtual deps \
-    g++ \
-    git \
-    make \
-    python3 && \
+RUN apt-get install g++ git  make python3 -y && \
     yarn install --frozen-lockfile --production && \
     yarn cache clean && \
-    apk del deps && \
-    rm -rf /tmp/*
+    apt-get purge g++ git make python3  -y && \
+    apt-get autoremove -y && \
+    apt-get clean -y && \
+    rm -rf /tmp/* && \
+    rm -rf /var/lib/apt/lists/*
 
 # copy app files
 COPY . ./
 
-RUN adduser -D -h /home/cfu -s /bin/bash cfu    
+RUN adduser --disabled-password  -home /home/cfu -shell /bin/bash cfu
 
 USER cfu
 

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cf-container-logger",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "codefresh container logger",
   "keywords": [
     "cf-container-logger"
@@ -41,7 +41,7 @@
     "sinon-chai": "^3.7.0"
   },
   "engines": {
-    "node": "16.16.0"
+    "node": "16.18.1"
   },
   "scripts": {
     "lint": "eslint '*/**/*.js'",

diff --git a/service.yaml b/service.yaml
@@ -1 +1 @@
-version: 1.8.4
+version: 1.8.5