fix: Address CVE in Alpine base image (#525)

Signed-off-by: Leonard Goodell <[email protected]>
edgexfoundry · Nov 14, 2023 · 3d74835 · 3d74835
1 parent 3472a71
commit 3d74835
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -37,6 +37,8 @@ LABEL license='SPDX-License-Identifier: Apache-2.0' \
       copyright='Copyright (c) 2019-2021: IoTech Ltd'
 
 RUN apk add --update --no-cache dumb-init
+# Ensure using latest versions of all installed packages to avoid any recent CVEs
+RUN apk --no-cache upgrade
 
 COPY --from=builder /device-modbus-go/cmd /
 COPY --from=builder /device-modbus-go/LICENSE /