commit 104f235bb13a52c50ee3d04d23cb6ba68d7d78f0
parent 417b4a77ffeef454945e2fe1be213f896dc0d5e4
Author: Andreas Gruhler <agruhl@gmx.ch>
Date: Wed, 6 Aug 2025 22:56:45 +0200
fix(dockerfile): AVD-DS-0017
According to trivy, The instruction 'RUN <package-manager> update'
should always be followed by '<package-manager> install' in the same RUN
statement.
* https://avd.aquasec.com/misconfig/ds017
Diffstat:
2 files changed, 2 insertions(+), 4 deletions(-)
diff --git a/dockerfiles/api/Dockerfile b/dockerfiles/api/Dockerfile
@@ -1,7 +1,6 @@
FROM docker.io/node:18-alpine
-RUN apk update
-RUN apk add --no-cache git
+RUN apk update && apk add --no-cache git
WORKDIR /app
RUN git clone --depth 1 https://git.in0rdr.ch/myheats.git /app
diff --git a/dockerfiles/frontend/Dockerfile b/dockerfiles/frontend/Dockerfile
@@ -11,8 +11,7 @@ ARG VITE_APP_DOC_TITLE='My Heats'
ENV NODE_ENV="$NODE_ENV"
ENV VITE_APP_DOC_TITLE="$VITE_APP_DOC_TITLE"
-RUN apk update
-RUN apk add --no-cache git
+RUN apk update && apk add --no-cache git
WORKDIR /app
RUN git clone --depth 1 https://git.in0rdr.ch/myheats.git /app