Add trivy and update OS

Dockerfile

@@ -6,7 +6,10 @@ FROM node:16.13.2-alpine as builder
 ARG USER_ID
 ARG GROUP_ID
 
-RUN if [ ${USER_ID:-0} -ne 0 ] && [ ${GROUP_ID:-0} -ne 0 ]; then \
+RUN apk update && \
+    apk upgrade && \
+    rm -rf /var/cache/apk/* && \
+    if [ ${USER_ID:-0} -ne 0 ] && [ ${GROUP_ID:-0} -ne 0 ]; then \
     deluser node && \
     addgroup -g ${GROUP_ID} node && \
     adduser -u ${USER_ID} -D node -G node \

Makefile

@@ -19,6 +19,14 @@ _build:
 		--target ${TARGET_IMAGE} \
 		-t ${TARGET_IMAGE}:${TARGET_TAG} .
 
+trivy:
+	make build_prod && \
+	docker run --rm \
+	-v /var/run/docker.sock:/var/run/docker.sock \
+	aquasec/trivy image \
+	--no-progress --ignore-unfixed --severity HIGH,CRITICAL \
+	transifex-delivery:latest
+
 up:
 	docker-compose -f docker-compose.yml -f docker-compose.dev.yml up