Merge pull request #49 from folio-org/perl-Dockerfile-upgrade

apk upgrade, apt-get upgrade fixing openssl/libcrypto3 vulns
folio-org · Nov 24, 2023 · 23e48dc · 23e48dc
2 parents 69e4087 + d30d175
commit 23e48dc
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/simple-perl/Dockerfile b/simple-perl/Dockerfile
@@ -8,11 +8,16 @@
 
 FROM alpine
 
-RUN apk add --no-cache perl perl-net-server perl-json perl-cgi perl-lwp-useragent-determined
+# Install latest patch versions of packages: https://pythonspeed.com/articles/security-updates-in-docker/
+RUN apk upgrade \
+ && apk add \
+      perl perl-net-server perl-json perl-cgi perl-lwp-useragent-determined \
+ && rm -rf /var/cache/apk/*
 
 # or:
 #FROM perl:slim
-#RUN apt-get update && apt-get -y install libnet-server-perl libjson-perl libcgi-pm-perl libmodule-build-perl libwww-perl
+## Install latest patch versions of packages: https://pythonspeed.com/articles/security-updates-in-docker/
+#RUN apt-get update && apt-get -y upgrade && apt-get -y install libnet-server-perl libjson-perl libcgi-pm-perl libmodule-build-perl libwww-perl
 #ENV PERL5LIB /usr/share/perl5
 
 # Set the location of the script