fix: update npm in production images to resolve crossspawn vuln

snyk · Jan 15, 2025 · d867a62 · d867a62
1 parent f17a9c1
commit d867a62
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -30,6 +30,8 @@ RUN apk update
 RUN apk upgrade
 RUN apk --no-cache add dumb-init skopeo curl bash python3
 
+RUN npm install -g [email protected]
+
 RUN addgroup -S -g 10001 snyk
 RUN adduser -S -G snyk -h /srv/app -u 10001 snyk