Skip to content

Install security updates to nginx base image using Debian-based nginx:1.29.1-bookworm in Dockerfile #3626

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 4 commits into from
Closed

Install security updates to nginx base image using Debian-based nginx:1.29.1-bookworm in Dockerfile #3626

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
be812ec
Initial plan
Copilot Oct 2, 2025
e449196
Add security updates to nginx:mainline-alpine-slim base image
Copilot Oct 2, 2025
cc1c816
Update Alpine security updates to include apk update and --available …
Copilot Oct 2, 2025
3d4f871
Switch to Debian-based nginx:1.29.1-bookworm with debscan for securit…
Copilot Nov 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,15 @@ COPY . .
RUN yarn build-prod

# Stage 4: Production
FROM nginx:mainline-alpine-slim AS production
FROM nginx:1.29.1-bookworm AS production

# Install security updates
RUN apt-get update \
&& apt-get install -y \
debsecan \
&& apt-get install --no-install-recommends -y \
$(debsecan --suite bookworm --format packages --only-fixed) \
&& rm -rf /var/lib/apt/lists/*

# Copy nginx configuration and build application inside the final container
COPY --from=builder /app/docker/nginx.conf /etc/nginx/conf.d/default.conf
Expand Down