diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml index 3f424d5ae..d3cc824be 100644 --- a/.github/workflows/analysis.yml +++ b/.github/workflows/analysis.yml @@ -82,7 +82,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.18.0 + uses: aquasecurity/trivy-action@0.19.0 with: format: "sarif" output: "trivy-results.sarif" diff --git a/backend/Dockerfile b/backend/Dockerfile index fe16c8568..b61fb11dc 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -1,6 +1,6 @@ # Build static files # Node Bullseye has npm -FROM node:20.11.1-bullseye-slim AS buildWithDevDeps +FROM node:20.12.0-bullseye-slim AS buildWithDevDeps # Install packages, build and keep only prod packages WORKDIR /app @@ -9,7 +9,7 @@ COPY ./src ./src COPY ./prisma ./prisma RUN npm ci --ignore-scripts --no-update-notifier RUN npm run prisma-generate -FROM node:20.11.1-bullseye-slim AS build +FROM node:20.12.0-bullseye-slim AS build # Install packages, build and keep only prod packages WORKDIR /app diff --git a/frontend/Dockerfile b/frontend/Dockerfile index b3e9c3345..4c4ce5d1d 100644 --- a/frontend/Dockerfile +++ b/frontend/Dockerfile @@ -1,6 +1,6 @@ # Build static files # Node Bullseye has npm -FROM node:20.11.1-bullseye-slim AS build +FROM node:20.12.0-bullseye-slim AS build # Install packages, build and keep only prod packages WORKDIR /app