Skip to content

[Snyk] Security upgrade caddy from alpine to 2.11-alpine #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ajhalili2006 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade caddy from alpine to 2.11-alpine #11

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docker/caddy/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# syntax=docker/dockerfile:1
FROM tailscale/tailscale:latest as tailscale

Check failure on line 2 in docker/caddy/Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint 

DL3007 warning: Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag

Check failure on line 2 in docker/caddy/Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint 

DL3007 warning: Using latest is prone to errors if the image will ever update. Pin the version explicitly to a release tag

FROM caddy:builder-alpine as builder

Expand All @@ -10,7 +10,7 @@
--with github.com/ss098/certmagic-s3 \
--with github.com/sagikazarmark/caddy-fs-s3

FROM caddy:alpine as runner
FROM caddy:2.11-alpine as runner

LABEL org.opencontainers.image.description="Plain Caddy and community plugins, minus FrankenPHP." \
org.opencontainers.image.source="https://github.com/andreijiroh-dev/docker-images" \
Expand All @@ -18,7 +18,7 @@
org.opencontainers.image.url="https://go.andreijiroh.xyz/mkdocs-material" \
org.opencontainers.image.documentation="https://github.com/andreijiroh-dev/docker-images/blob/main/docker/mkdocs-material/README.md" \
org.opencontainers.image.license="MPL-2.0"
LABEL dev.recaptime.opensource.stabilityLevel="unstable" \

Check failure on line 21 in docker/caddy/Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint 

DL3048 style: Invalid label key.

Check failure on line 21 in docker/caddy/Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint 

DL3048 style: Invalid label key.
dev.recaptime.opensource.maintainer="ajhalili2006" \
dev.recaptime.opensource.license="MPL-2.0" \
dev.recaptime.opensource.repoOwnerType="staff-verified-public"
Expand All @@ -27,7 +27,7 @@
COPY --from=tailscale /usr/local/bin/tailscale /usr/local/bin/tailscaled /usr/local/bin/
COPY entrypoint.sh /usr/local/bin/

RUN apk add --no-cache ca-certificates iptables iproute2 ip6tables bash ca-certificates libcap mailcap dumb-init \

Check failure on line 30 in docker/caddy/Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint 

DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`

Check failure on line 30 in docker/caddy/Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint 

DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
&& mkdir -p /var/run/tailscale /var/cache/tailscale /var/lib/tailscale \
&& setcap cap_net_bind_service=+ep /usr/bin/caddy

Expand Down
Loading