Skip to content

Updated vulnerable packages #1573

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
KambleSahil3 merged 14 commits into from
Mar 23, 2026
Merged

Updated vulnerable packages #1573

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
857ad18
Updated vulnerable packages and Updated all Dockerfiles to use Node.j…
DeepakNemad Feb 25, 2026
aaed3a4
Fix: Resolve Dockerfile vulnerabilities and cleanup
DeepakNemad Feb 25, 2026
284d545
Fix: Resolve the Coderabit changes
DeepakNemad Feb 25, 2026
9a636f7
Fix: Resolve Dockerfile vulnerabilities and cleanup
DeepakNemad Feb 25, 2026
4e06601
Fix: Resolve the sonarqube changes
DeepakNemad Feb 25, 2026
2c92b13
Fix: Resolve the sonarqube changes
DeepakNemad Feb 25, 2026
24ad3df
Fix: Resolve the sonarqube changes
DeepakNemad Feb 25, 2026
d23d50f
Fix: Resolve the sonarqube changes
DeepakNemad Feb 25, 2026
fe80364
Fixed coderabit suggested changes
DeepakNemad Mar 12, 2026
b99fa33
Fixed coderabit suggested changes
DeepakNemad Mar 12, 2026
ea4df07
All 19 Dockerfiles have been updated consistently while maintaining t…
DeepakNemad Mar 16, 2026
8092250
fixed agent proviosining issue
DeepakNemad Mar 20, 2026
bab86b9
Added stable version of openssl
DeepakNemad Mar 23, 2026
b0835f8
Added stable version of openssl
DeepakNemad Mar 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions Dockerfiles/Dockerfile.agent-provisioning
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
# Stage 1: Build the application
FROM node:18-alpine as build
FROM node:24-alpine3.21 AS build
# Install OpenSSL
RUN apk update && apk upgrade
RUN apk add --no-cache openssl
RUN apk add --no-cache openssl=3.3.3-r0
RUN set -eux \
&& apk --no-cache add \
openssh-client \
Expand Down Expand Up @@ -38,10 +38,10 @@ RUN ls -R /app/apps/agent-provisioning/AFJ/
RUN pnpm run build agent-provisioning

# Stage 2: Create the final image
FROM node:18-alpine as prod
FROM node:24-alpine3.21
# Install OpenSSL
RUN apk update && apk upgrade
RUN apk add --no-cache openssl
RUN apk add --no-cache openssl=3.3.3-r0
RUN set -eux \
&& apk --no-cache add \
openssh-client \
Expand Down
71 changes: 25 additions & 46 deletions Dockerfiles/Dockerfile.agent-service
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,57 +1,36 @@
# Stage 1: Build the application
FROM node:18-alpine as build
# Install OpenSSL
RUN apk add --no-cache openssl
RUN npm install -g pnpm --ignore-scripts \
&& apk update \
&& apk add openssh-client \
&& apk add aws-cli \
&& apk add docker \
&& apk add docker-compose

RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21 AS build
RUN apk update && apk upgrade && apk add --no-cache \
openssl=3.3.3-r0 \
openssh-client \
aws-cli \
docker \
docker-compose \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app

# Copy package.json and package-lock.json
COPY package.json ./
COPY pnpm-workspace.yaml ./

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
ENV PUPPETEER_SKIP_DOWNLOAD=true

# Install dependencies while ignoring scripts (including Puppeteer's installation)
RUN pnpm i --ignore-scripts

# Copy the rest of the application code
RUN pnpm i --frozen-lockfile --ignore-scripts
COPY . .
# RUN cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate
RUN cd libs/prisma-service && npx prisma generate

# Build the user service
RUN pnpm run build agent-service
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:18-alpine
# Install OpenSSL
RUN apk add --no-cache openssl
RUN npm install -g pnpm --ignore-scripts \
&& apk update \
&& apk add openssh-client \
&& apk add aws-cli \
&& apk add docker \
&& apk add docker-compose

# RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21
RUN apk update && apk upgrade && apk add --no-cache \
openssl=3.3.3-r0 \
openssh-client \
aws-cli \
docker \
docker-compose \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
&& adduser -S nextjs -u 1001
WORKDIR /app

# Copy the compiled code from the build stage
COPY --from=build /app/dist/apps/agent-service/ ./dist/apps/agent-service/

# Copy the libs folder from the build stage
COPY --from=build /app/libs/ ./libs/
#COPY --from=build /app/package.json ./
COPY --from=build /app/node_modules ./node_modules

# Set the command to run the microservice
CMD ["sh", "-c", "cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate && cd ../.. && node dist/apps/agent-service/main.js"]
COPY --from=build /app/node_modules ./node_modules
USER nextjs
CMD ["node", "dist/apps/agent-service/main.js"]
48 changes: 15 additions & 33 deletions Dockerfiles/Dockerfile.api-gateway
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,44 +1,26 @@
# Stage 1: Build the application
FROM node:18-alpine as build
# Install OpenSSL
RUN apk add --no-cache openssl
RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app

# Copy package.json and package-lock.json
COPY package.json ./
COPY pnpm-workspace.yaml ./
# COPY package-lock.json ./

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
ENV PUPPETEER_SKIP_DOWNLOAD=true

# Install dependencies while ignoring scripts (including Puppeteer's installation)
RUN pnpm i --ignore-scripts

# Copy the rest of the application code
RUN pnpm i --frozen-lockfile --ignore-scripts
COPY . .
# RUN cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate
RUN cd libs/prisma-service && npx prisma generate

# Build the api-gateway service
RUN pnpm run build api-gateway
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:18-alpine
# Install OpenSSL
RUN apk add --no-cache openssl

# Set the working directory
FROM node:24-alpine3.21
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
&& adduser -S nextjs -u 1001
WORKDIR /app

# Copy the compiled code from the build stage
COPY --from=build /app/dist/apps/api-gateway/ ./dist/apps/api-gateway/

# Copy the libs folder from the build stage
COPY --from=build /app/libs/ ./libs/
COPY --from=build /app/node_modules ./node_modules
# COPY --from=build /app/uploadedFiles ./uploadedFiles

# Set the command to run the microservice
CMD ["sh", "-c", "cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate && cd ../.. && node dist/apps/api-gateway/main.js"]
COPY --from=build /app/node_modules ./node_modules
USER nextjs
CMD ["node", "dist/apps/api-gateway/main.js"]
50 changes: 15 additions & 35 deletions Dockerfiles/Dockerfile.cloud-wallet
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,46 +1,26 @@
# Stage 1: Build the application
FROM node:18-alpine AS build
# Install OpenSSL
RUN apk add --no-cache openssl
RUN npm install -g pnpm

# Set the working directory
FROM node:24-alpine3.21 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app

# Copy package.json and package-lock.json
COPY package.json ./
COPY pnpm-workspace.yaml ./

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
ENV PUPPETEER_SKIP_DOWNLOAD=true

# Install dependencies while ignoring scripts (including Puppeteer's installation)
RUN pnpm i --ignore-scripts

# Copy the rest of the application code
RUN pnpm i --frozen-lockfile --ignore-scripts
COPY . .
# RUN cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate
RUN cd libs/prisma-service && npx prisma generate

# Build the user service
RUN pnpm run build cloud-wallet
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:18-alpine

RUN apk add --no-cache openssl

# Set the working directory
FROM node:24-alpine3.21
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
&& adduser -S nextjs -u 1001
WORKDIR /app
# RUN npm install -g pnpm

# Copy the compiled code from the build stage
COPY --from=build /app/dist/apps/cloud-wallet/ ./dist/apps/cloud-wallet/

# Copy the libs folder from the build stage
COPY --from=build /app/libs/ ./libs/
#COPY --from=build /app/package.json ./
COPY --from=build /app/node_modules ./node_modules


# Set the command to run the microservice
CMD ["sh", "-c", "cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate && cd ../.. && node dist/apps/cloud-wallet/main.js"]
COPY --from=build /app/node_modules ./node_modules
Comment thread
coderabbitai[bot] marked this conversation as resolved.
USER nextjs
CMD ["node", "dist/apps/cloud-wallet/main.js"]
51 changes: 15 additions & 36 deletions Dockerfiles/Dockerfile.connection
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,47 +1,26 @@
# Stage 1: Build the application
FROM node:18-alpine as build
# Install OpenSSL
RUN apk add --no-cache openssl
RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app

# Copy package.json and package-lock.json
COPY package.json ./
COPY pnpm-workspace.yaml ./
#COPY package-lock.json ./

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
ENV PUPPETEER_SKIP_DOWNLOAD=true

# Install dependencies while ignoring scripts (including Puppeteer's installation)
RUN pnpm i --ignore-scripts

# Copy the rest of the application code
RUN pnpm i --frozen-lockfile --ignore-scripts
COPY . .
# RUN cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate
RUN cd libs/prisma-service && npx prisma generate

# Build the connection service
RUN pnpm run build connection
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:18-alpine
# Install OpenSSL
RUN apk add --no-cache openssl
# RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
&& adduser -S nextjs -u 1001
WORKDIR /app

# Copy the compiled code from the build stage
COPY --from=build /app/dist/apps/connection/ ./dist/apps/connection/

# Copy the libs folder from the build stage
COPY --from=build /app/libs/ ./libs/
#COPY --from=build /app/package.json ./
COPY --from=build /app/node_modules ./node_modules

# Install production dependencies for the final image
#RUN npm i --only=production

# Set the command to run the microservice
CMD ["sh", "-c", "cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate && cd ../.. && node dist/apps/connection/main.js"]
COPY --from=build /app/node_modules ./node_modules
Comment thread
coderabbitai[bot] marked this conversation as resolved.
USER nextjs
CMD ["node", "dist/apps/connection/main.js"]
48 changes: 15 additions & 33 deletions Dockerfiles/Dockerfile.ecosystem
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,44 +1,26 @@
# Stage 1: Build the application
FROM node:18-alpine as build
# Install OpenSSL
RUN apk add --no-cache openssl
RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21 AS build
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/*
RUN npm install -g pnpm@9.15.3 --ignore-scripts
WORKDIR /app

# Copy package.json and package-lock.json
COPY package.json ./
COPY pnpm-workspace.yaml ./
#COPY package-lock.json ./

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
ENV PUPPETEER_SKIP_DOWNLOAD=true

# Install dependencies while ignoring scripts (including Puppeteer's installation)
RUN pnpm i --ignore-scripts

# Copy the rest of the application code
RUN pnpm i --frozen-lockfile --ignore-scripts
COPY . .
# RUN cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate
RUN cd libs/prisma-service && npx prisma generate

# Build the connection service
RUN pnpm run build ecosystem
RUN pnpm prune --prod

# Stage 2: Create the final image
FROM node:18-alpine
# Install OpenSSL
RUN apk add --no-cache openssl
# RUN npm install -g pnpm
# Set the working directory
FROM node:24-alpine3.21
RUN apk update && apk upgrade && apk add --no-cache openssl=3.3.3-r0 \
&& rm -rf /var/cache/apk/* \
&& addgroup -g 1001 -S nodejs \
&& adduser -S nextjs -u 1001
WORKDIR /app

# Copy the compiled code from the build stage
COPY --from=build /app/dist/apps/ecosystem/ ./dist/apps/ecosystem/

# Copy the libs folder from the build stage
COPY --from=build /app/libs/ ./libs/
#COPY --from=build /app/package.json ./
COPY --from=build /app/node_modules ./node_modules

# Set the command to run the microservice
CMD ["sh", "-c", "cd libs/prisma-service && npx prisma migrate deploy && npx prisma generate && cd ../.. && node dist/apps/ecosystem/main.js"]
COPY --from=build /app/node_modules ./node_modules
USER nextjs
CMD ["node", "dist/apps/ecosystem/main.js"]
Loading
Loading