fix: Address CVE in Alpine base image (#367)

Signed-off-by: Leonard Goodell <[email protected]>
edgexfoundry · Nov 14, 2023 · 990d379 · 990d379
1 parent abaf377
commit 990d379
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -42,6 +42,8 @@ LABEL Name=device-rest-go Version=${VERSION}
 
 # dumb-init needed for injected secure bootstrapping entrypoint script when run in secure mode.
 RUN apk add --update --no-cache dumb-init
+# Ensure using latest versions of all installed packages to avoid any recent CVEs
+RUN apk --no-cache upgrade
 
 COPY --from=builder /device-rest-go/cmd /
 COPY --from=builder /device-rest-go/LICENSE /