fix(security): patch Docker Scout CVEs in x/net and Alpine packages

Upgrade golang.org/x/net v0.54.0 → v0.55.0 (CVE-2026-41589 critical, CVE-2025-60876, CVE-2026-42502, CVE-2026-42506, CVE-2026-25681, CVE-2026-35414). Add apk upgrade to Dockerfile for openssh and busybox CVEs (CVE-2026-25680, CVE-2026-27136, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388).
2026-05-29 20:05:28 -04:00
parent ec898ff943
commit 13a0860dd3
3 changed files with 4 additions and 3 deletions
@@ -18,6 +18,7 @@ RUN --mount=type=cache,target=/go/pkg/mod \
 FROM alpine:3.23
 WORKDIR /app
 RUN apk add --no-cache ca-certificates openssh-client
+RUN apk upgrade --no-cache
 RUN mkdir /data

 COPY --from=builder /app/uptop .