Skip to content

fix: upgrade alpine packages in final image to address CVE-2026-63073 #331

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Farjaad merged 2 commits into from
Sep 1, 2026
Merged

fix: upgrade alpine packages in final image to address CVE-2026-63073 #331

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5135541
fix: upgrade alpine packages in final image to address CVE-2026-63073
farjaad-opslevel Sep 1, 2026
3d7328a
docs: explain why the final image upgrades apk packages
farjaad-opslevel Sep 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,9 @@ FROM golang:alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b99
RUN apk --no-cache add ca-certificates

FROM alpine:latest@sha256:28bd5fe8b56d1bd048e5babf5b10710ebe0bae67db86916198a6eec434943f8b
# alpine:latest is only rebuilt on alpine point releases, so it can ship packages
# with CVEs that are already patched in the apk repos - pull those fixes in here
RUN apk --no-cache upgrade
ARG TARGETPLATFORM
# copy the ca-certificate.crt from the build stage
COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
Expand Down
Loading