fix(docker): pin nginx base image to 1.28-alpine

[openjiuwen-sync-bot]

Paired: GitHub #263 ↔ GitCode !1813

Summary

Fixes #​1277: the web Dockerfiles used the floating nginx:alpine tag, so the shipped image tracked whatever nginx release was latest at build time and could carry known high-severity CVEs.

Change

• docker/Dockerfile.web and docker/Dockerfile.web.http: FROM nginx:alpine → FROM nginx:1.28-alpine
• Pinning makes builds reproducible and applies the nginx 1.27 → 1.28 CVE fix.
• Verified nginx:1.28-alpine exists on Docker Hub (docker manifest inspect).

Verification

• docker manifest inspect nginx:1.28-alpine — tag exists
• Dockerfiles are plain one-line base-image changes; no runtime behavior change intended.

Linked Closing Issues:

• Fixes [Bug]: 升级 studio-console 基础镜像 nginx:1.27 -> 1.28 消除高危 CVE #204

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[openjiuwen-collaboration-bot]

head_sha: 2ed198abb68eb27c2c88274eca88e95f1e5de5ca

变更摘要

此 PR 将两个 Web Dockerfile 中的 nginx 基础镜像从浮动标签 nginx:alpine 固定为 nginx:1.28-alpine，解决 issue #​1277 中因使用浮动标签导致构建不可重现、且可能引入高危 CVE 的问题。改动仅限于 FROM 指令的一行替换，不涉及运行时行为变更。

主要改动

• 固定 docker/Dockerfile.web 的 nginx 基础镜像版本：将 FROM nginx:alpine 替换为 FROM nginx:1.28-alpine，确保该镜像的构建使用 nginx 1.28 而非任意最新版本。
• 固定 docker/Dockerfile.web.http 的 nginx 基础镜像版本：同样将 FROM nginx:alpine 替换为 FROM nginx:1.28-alpine，使 HTTP 版本的 Web 镜像与应用 nginx 1.27→1.28 的 CVE 修复保持一致。

[openjiuwen-collaboration-bot]

head_sha: 2ed198abb68eb27c2c88274eca88e95f1e5de5ca

代码审查

✅ 未发现问题

[openjiuwen-collaboration-bot]

head_sha: 2ed198abb68eb27c2c88274eca88e95f1e5de5ca

TASK	STATUS	DETAILS
CodeCheck	✅SUCCESS	Click here
AntiPoison	✅SUCCESS	Click here
Software Composition Analysis	✅SUCCESS	Click here
Npm Build	❌FAILED	See CHECK tab
Ruff Check	✅SUCCESS	See CHECK tab