Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
ARG PHP_VERSION=8.4
ARG NGINX_VERSION=1.29

ARG ALPINE_VERSION=3.22
ARG ALPINE_VERSION=3.23
ARG ALPINE_VERSION_NGINX=3.22
ARG HARDENED_MALLOC_VERSION=11
ARG SNUFFLEUPAGUS_VERSION=0.12.0
Expand All @@ -24,7 +24,7 @@
ARG SNUFFLEUPAGUS_VERSION
ADD https://github.com/mlocati/docker-php-extension-installer/releases/latest/download/install-php-extensions /usr/local/bin/

RUN apk -U upgrade \

Check failure on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3019 info: Use the `--no-cache` switch to avoid the need to use `--update` and remove `/var/cache/apk/*` when done installing packages

Check failure on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

SC2086 info: Double quote to prevent globbing and word splitting.

Check failure on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`

Check failure on line 27 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3003 warning: Use WORKDIR to switch to a directory
&& apk add -t build-deps \
$PHPIZE_DEPS \
freetype-dev \
Expand Down Expand Up @@ -89,7 +89,7 @@
ARG CONFIG_NATIVE=false
ARG VARIANT=light

RUN apk --no-cache add build-base git gnupg && cd /tmp \

Check failure on line 92 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3003 warning: Use WORKDIR to switch to a directory

Check failure on line 92 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`

Check failure on line 92 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

SC2046 warning: Quote this to prevent word splitting.
&& wget -q https://github.com/thestinger.gpg && gpg --import thestinger.gpg \
&& git clone --depth 1 --branch ${HARDENED_MALLOC_VERSION} https://github.com/GrapheneOS/hardened_malloc \
&& cd hardened_malloc && git verify-tag $(git describe --tags) \
Expand Down Expand Up @@ -125,7 +125,7 @@
PHP_HARDENING=true \
LD_PRELOAD="/usr/local/lib/libhardened_malloc-light.so"

RUN apk --no-cache add \

Check failure on line 128 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check

Check failure on line 128 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3003 warning: Use WORKDIR to switch to a directory

Check failure on line 128 in Dockerfile

View workflow job for this annotation

GitHub Actions / hadolint

DL3018 warning: Pin versions in apk add. Instead of `apk add <package>` use `apk add <package>=<version>`
gnupg \
pcre2 \
s6 \
Expand Down