feat: add Trivy security scan workflow and update Dockerfiles for vulnerability scanning

2026-03-17 22:54:00 +05:30
parent 8bf52b9ef1
commit 23b072ea10
4 changed files with 113 additions and 1 deletions
--- a/Dockerfile.nonroot
+++ b/Dockerfile.nonroot
@@ -75,7 +75,7 @@ ENV PUID=1000
 ENV PGID=1000
 ENV DISABLE_IPV6=false

-RUN apk add --no-cache su-exec
+RUN apk upgrade --no-cache && apk add --no-cache su-exec

 COPY --from=builder /app/dist /usr/share/nginx/html${BASE_URL%/}
 COPY nginx.conf /etc/nginx/nginx.conf