From 3cee86ceecf86f6a80e93b3d3b05f40637e7cdd0 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 8 Sep 2024 10:53:51 +0000 Subject: [PATCH] fix: monitoring-as-code/tools/promtool/Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3314624 - https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3314624 - https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3314641 - https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3314643 - https://snyk.io/vuln/SNYK-ALPINE316-OPENSSL-3368756 --- monitoring-as-code/tools/promtool/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/monitoring-as-code/tools/promtool/Dockerfile b/monitoring-as-code/tools/promtool/Dockerfile index a0204be1..7fb6ede2 100644 --- a/monitoring-as-code/tools/promtool/Dockerfile +++ b/monitoring-as-code/tools/promtool/Dockerfile @@ -7,7 +7,7 @@ RUN VERSION=$(curl -Ls https://api.github.com/repos/prometheus/prometheus/releas | tar xvzf - "prometheus-$VERSION.linux-amd64"/promtool --strip-components=1 && cp promtool /go/bin/promtool -FROM alpine:3.16.2 AS runner +FROM alpine:3.19.4 AS runner COPY --from=builder /go/bin/promtool /usr/local/bin