From 9aa0cb778850ad9178bb79885f6cb6634e8f15bf Mon Sep 17 00:00:00 2001
From: Anthony LC <anthony.le-courric@mail.numerique.gouv.fr>
Date: Thu, 15 May 2025 16:13:06 +0200
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F(docker)=20upgrade=20to=20rec?=
 =?UTF-8?q?ommended=20version?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Docker DX linter and trivy were pointing
vulnerabilities in our Dockerfile.
We bumped the base image to a more secure version.
---
 Dockerfile                                 | 5 +++--
 src/frontend/Dockerfile                    | 4 ++--
 src/frontend/servers/y-provider/Dockerfile | 4 ++--
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 23f26b70..bce2987e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # Django impress
 
 # ---- base image to inherit from ----
-FROM python:3.12.6-alpine3.20 AS base
+FROM python:3.12.10-alpine AS base
 
 # Upgrade pip to its latest release to speed up dependencies installation
 RUN python -m pip install --upgrade pip setuptools
@@ -30,12 +30,13 @@ RUN mkdir /install && \
 
 
 # ---- mails ----
-FROM node:20 AS mail-builder
+FROM node:24-alpine AS mail-builder
 
 COPY ./src/mail /mail/app
 
 WORKDIR /mail/app
 
+RUN apk update && apk add --no-cache bash
 RUN yarn install --frozen-lockfile && \
     yarn build
 
diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile
index 6aa3fcbe..8c5f22ce 100644
--- a/src/frontend/Dockerfile
+++ b/src/frontend/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20-alpine AS frontend-deps
+FROM node:24-alpine AS frontend-deps
 
 WORKDIR /home/frontend/
 
@@ -45,7 +45,7 @@ ENV NEXT_PUBLIC_PUBLISH_AS_MIT=${PUBLISH_AS_MIT}
 RUN yarn build
 
 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:1.26-alpine AS frontend-production
+FROM nginxinc/nginx-unprivileged:1.27-alpine AS frontend-production
 
 # Un-privileged user running the application
 ARG DOCKER_USER
diff --git a/src/frontend/servers/y-provider/Dockerfile b/src/frontend/servers/y-provider/Dockerfile
index 2e16bdd5..cbb16dec 100644
--- a/src/frontend/servers/y-provider/Dockerfile
+++ b/src/frontend/servers/y-provider/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:20-alpine AS y-provider-builder
+FROM node:24-alpine AS y-provider-builder
 
 WORKDIR /home/frontend/
 
@@ -15,7 +15,7 @@ COPY ./src/frontend/servers/y-provider ./servers/y-provider
 WORKDIR /home/frontend/servers/y-provider
 RUN yarn build
 
-FROM node:20-alpine AS y-provider
+FROM node:24-alpine AS y-provider
 
 WORKDIR /home/frontend/