Skip to content

Commit 2f71a60

Browse files
seab4ngclaude
andcommitted
fix(docker): remove curl to eliminate unfixable CVE-2026-3805
curl is not needed by nginx to serve static files. Removing it drops the HIGH CVE from the image attack surface while Alpine upstream works on a patch. Also clears apk cache to reduce image size. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent cc2c97f commit 2f71a60

1 file changed

Lines changed: 2 additions & 1 deletion

File tree

Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,8 @@ LABEL maintainer="Yakir Veneci" \
1111
org.opencontainers.image.source="https://github.com/seab4ng/helm-values-veiwer"
1212

1313
RUN apk upgrade --no-cache && \
14-
rm -rf /usr/share/nginx/html/* /etc/nginx/conf.d/default.conf
14+
apk del curl && \
15+
rm -rf /usr/share/nginx/html/* /etc/nginx/conf.d/default.conf /var/cache/apk/*
1516

1617
COPY nginx.conf /etc/nginx/conf.d/default.conf
1718
COPY app/index.html /usr/share/nginx/html/index.html

0 commit comments

Comments
 (0)