Skip to content

fix: Update Dockerfile to use 'bookworm' variant and apply security patch#271

Merged
pwei1018 merged 1 commit into
bcgov:mainfrom
pwei1018:main
Jun 4, 2026
Merged

fix: Update Dockerfile to use 'bookworm' variant and apply security patch#271
pwei1018 merged 1 commit into
bcgov:mainfrom
pwei1018:main

Conversation

@pwei1018
Copy link
Copy Markdown
Collaborator

@pwei1018 pwei1018 commented Jun 4, 2026

…atches
This pull request updates the Dockerfile for the notify-delivery service to use the newer Debian Bookworm base image and improves security by ensuring the latest patches are applied during build. The changes also optimize the installation of runtime dependencies.

Base image updates:

  • Switched the base images from Debian Bullseye to Debian Bookworm for both the build and production stages in the Dockerfile, ensuring access to newer system libraries and security updates. [1] [2]

Security and dependency management:

  • Added an apt-get upgrade -y step during build to apply the latest security patches, and optimized the installation of runtime dependencies by purging unnecessary packages and cleaning up after installation.

@pwei1018 pwei1018 requested a review from bolyachevets June 4, 2026 19:04
@pwei1018 pwei1018 merged commit 429b96b into bcgov:main Jun 4, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants