Use Amazon Linux 2023 & production dependencies only (#616)

aws · Sep 17, 2024 · c6c03eb · c6c03eb
1 parent 874ac52
commit c6c03eb
Show file tree

Hide file tree

Showing 5 changed files with 233 additions and 230 deletions.
diff --git a/Changelog.md b/Changelog.md
@@ -6,9 +6,13 @@
   ([#613](https://github.com/aws/graph-explorer/pull/613))
 - **Improved** query generation by removing empty lines
   ([#608](https://github.com/aws/graph-explorer/pull/608))
+- **Fixed** security vulnerabilities in the Docker image from dev dependencies
+  remaining in the image
+  ([#616](https://github.com/aws/graph-explorer/pull/616))
 - **Updated** multiple dependencies
   ([#611](https://github.com/aws/graph-explorer/pull/611),
-  [#614](https://github.com/aws/graph-explorer/pull/614))
+  [#614](https://github.com/aws/graph-explorer/pull/614),
+  [#616](https://github.com/aws/graph-explorer/pull/616))
 
 ## Release 1.10.1
 

diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,5 @@
 # syntax=docker/dockerfile:1
-FROM amazonlinux:2022
+FROM amazonlinux:2023
 ARG NEPTUNE_NOTEBOOK
 ENV NVM_DIR=/root/.nvm
 ENV NODE_VERSION=v20.17.0
@@ -35,7 +35,7 @@ RUN if [ -n "$NEPTUNE_NOTEBOOK" ] && [ "$NEPTUNE_NOTEBOOK" = "true" ]; then \
     else \
       echo "GRAPH_EXP_ENV_ROOT_FOLDER=/explorer" >> ./packages/graph-explorer/.env; \
     fi && \
-    pnpm build
+    pnpm build && pnpm clean:dep && pnpm install --prod --ignore-scripts
 EXPOSE 443
 EXPOSE 80
 EXPOSE 9250

diff --git a/package.json b/package.json
@@ -24,6 +24,7 @@
     "checks": "pnpm run '/^check:.*/'",
     "start": "pnpm --filter \"graph-explorer-proxy-server\" run start",
     "clean": "pnpm --stream -r run clean",
+    "clean:dep": "rm -rf node_modules && pnpm -r exec rm -rf node_modules",
     "build": "pnpm --stream -r run build",
     "dev": "pnpm --stream -r run dev"
   },

diff --git a/packages/graph-explorer/package.json b/packages/graph-explorer/package.json
@@ -87,7 +87,6 @@
     "tailwind-merge": "^2.5.2",
     "use-deep-compare-effect": "^1.8.1",
     "uuid": "^10.0.0",
-    "vite-tsconfig-paths": "^5.0.1",
     "zod": "^3.23.8"
   },
   "devDependencies": {
@@ -142,6 +141,7 @@
     "tslib": "^2.7.0",
     "type-fest": "^4.26.1",
     "vite": "^5.4.5",
+    "vite-tsconfig-paths": "^5.0.1",
     "vitest": "^2.1.1",
     "webpack": "^5.94.0"
   },