Merge pull request #197 from IABTechLab/bmz-UID2-7411-reverse-proxy-apk-upgrade

UID2-7411: Remediate HIGH/CRITICAL vulns in reverse-proxy image

Author: BehnamMozafari

tools/reverse-proxy/Dockerfile

@@ -1,5 +1,8 @@
 FROM nginx:alpine
 
+# Upgrade base Alpine packages to latest security builds (openssl/libssl3/libcrypto3, musl, zlib, libxml2, libexpat, nghttp2)
+RUN apk upgrade --no-cache
+
 # Install wget for healthcheck, gettext for envsubst, and openssl for fallback cert generation
 RUN apk add --no-cache wget gettext openssl