fix(security): CVE-2020-28928

aidmax · Dec 4, 2020 · 1b62069 · 1b62069
1 parent 97ea2e2
commit 1b62069
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -2,12 +2,16 @@ FROM adoptopenjdk/openjdk8:alpine-jre
 
 ENV STRUCTURIZR_VERSION 1.6.0
 
+
 # Create app directory
 WORKDIR /root/structurizr
 
 RUN set -e; \
-    apk add --no-cache bash && \
-    wget https://github.com/structurizr/cli/releases/download/v${STRUCTURIZR_VERSION}/structurizr-cli-${STRUCTURIZR_VERSION}.zip && \
+    apk add --no-cache \
+    bash \
+    musl-utils==1.1.24-r10 \
+    musl==1.1.24-r10 \
+    && wget https://github.com/structurizr/cli/releases/download/v${STRUCTURIZR_VERSION}/structurizr-cli-${STRUCTURIZR_VERSION}.zip && \
     unzip structurizr-cli-${STRUCTURIZR_VERSION}.zip && \
     ln -s structurizr-cli-${STRUCTURIZR_VERSION}.jar structurizr-cli.jar && \
     rm structurizr-cli-${STRUCTURIZR_VERSION}.zip