CR-13216 (#105)

* CR-13216 - migrating from alpine to debian

* upgrade to node:16.18.1 to handle security vulns

* update node version for testing

* fix

Co-authored-by: danielm-codefresh <[email protected]>

Author: yosi-codefresh

.nvmrc

@@ -1 +1 @@
-v16.16.0
+v16.18.1

Dockerfile

@@ -1,26 +1,25 @@
-FROM node:16.16.0-alpine3.16
+FROM node:16.18.1-bullseye-slim
 
 WORKDIR /root/cf-runtime
 
-RUN apk -U upgrade
+RUN apt-get update && apt upgrade -y
 
 COPY package.json yarn.lock ./
 
 # install cf-runtime required binaries
-RUN apk add --no-cache --virtual deps \
-    g++ \
-    git \
-    make \
-    python3 && \
+RUN apt-get install g++ git  make python3 -y && \
     yarn install --frozen-lockfile --production && \
     yarn cache clean && \
-    apk del deps && \
-    rm -rf /tmp/*
+    apt-get purge g++ git make python3  -y && \
+    apt-get autoremove -y && \
+    apt-get clean -y && \
+    rm -rf /tmp/* && \
+    rm -rf /var/lib/apt/lists/*
 
 # copy app files
 COPY . ./
 
-RUN adduser -D -h /home/cfu -s /bin/bash cfu    
+RUN adduser --disabled-password  -home /home/cfu -shell /bin/bash cfu
 
 USER cfu
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "cf-container-logger",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "codefresh container logger",
   "keywords": [
     "cf-container-logger"
@@ -41,7 +41,7 @@
     "sinon-chai": "^3.7.0"
   },
   "engines": {
-    "node": "16.16.0"
+    "node": "16.18.1"
   },
   "scripts": {
     "lint": "eslint '*/**/*.js'",

service.yaml

@@ -1 +1 @@
-version: 1.8.4
+version: 1.8.5