Skip to content

Migrate to hardened docker images #441

@riley-kohler

Description

@riley-kohler

Is your feature request related to a problem?

The current docker images used by private mirrors contain many dependencies that are unnecessary to the functioning of the app and present a vulnerability risk.

Describe the solution you'd like

Docker published Docker Hardened Images for Node.js that should reduce the number of unnecessary dependencies in the private mirrors images.

Describe alternatives you've considered

Alternatively the current private mirrors Dockerfile could have logic added to remove unnecessary dependencies but this has the risk of not being thorough or unintentionally breaking things.

Additional context

As part of this change the Dockerfile will need to be updated to not use an npm script as the final command in favor of directly executing the transpiled Javascript with node. There may also be complications due to the use of simple-git in private mirrors which will require testing to ensure that the new images still have the necessary dependencies.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions