From d160d98d1b4ff3ef6201b6371079d2c5b72cb701 Mon Sep 17 00:00:00 2001 From: Matheus-TecDev Date: Fri, 31 Jul 2026 20:28:28 -0300 Subject: [PATCH] fix: remediate Docker image vulnerabilities --- backend/Dockerfile | 1 + backend/requirements.txt | 5 +++-- frontend/Dockerfile | 2 +- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/backend/Dockerfile b/backend/Dockerfile index 9b466d9..80d329f 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -8,6 +8,7 @@ WORKDIR /app COPY requirements.txt . RUN pip install --no-cache-dir --upgrade pip && \ pip install --no-cache-dir -r requirements.txt && \ + pip uninstall --yes pip setuptools && \ groupadd --gid 10001 sentinel && \ useradd --uid 10001 --gid sentinel --home-dir /home/sentinel \ --create-home --shell /usr/sbin/nologin sentinel diff --git a/backend/requirements.txt b/backend/requirements.txt index 39df21e..37858b8 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,4 +1,5 @@ -fastapi==0.115.6 +fastapi==0.141.1 +starlette==1.3.1 uvicorn[standard]==0.34.0 SQLAlchemy==2.0.36 alembic==1.14.0 @@ -9,4 +10,4 @@ PyJWT==2.13.0 APScheduler==3.11.0 httpx==0.28.1 python-multipart==0.0.30 -prometheus-fastapi-instrumentator==7.0.2 +prometheus-fastapi-instrumentator==8.1.0 diff --git a/frontend/Dockerfile b/frontend/Dockerfile index 5c8ccd7..1c4722e 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -6,7 +6,7 @@ RUN npm ci COPY . . RUN npm run build -FROM nginx:1.27-alpine +FROM nginx:1.30.4-alpine3.24 COPY nginx.conf /etc/nginx/conf.d/default.conf COPY --from=build /app/dist /usr/share/nginx/html RUN chown -R nginx:nginx /var/cache/nginx /run && \