From 42df9b92d37626f84cb8f2c6d2779346770e48ef Mon Sep 17 00:00:00 2001
From: Stephen M Abbott <stephenabbott20@gmail.com>
Date: Thu, 12 Feb 2026 10:56:59 -0700
Subject: [PATCH] chore: harden container base images for SCA findings

---
 Dockerfile    | 4 ++--
 ui/Dockerfile | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3143658..9c3f4c5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build stage
-FROM golang:1.24-alpine AS build
+FROM golang:1.24.6-alpine3.21 AS build
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN go mod download
@@ -7,7 +7,7 @@ COPY . .
 RUN CGO_ENABLED=0 go build -o /oss-deps-explorer ./cmd/oss-deps-explorer
 
 # Runtime stage
-FROM alpine:3.18
+FROM alpine:3.21
 RUN adduser -D app
 USER app
 COPY --from=build /oss-deps-explorer /usr/local/bin/oss-deps-explorer
diff --git a/ui/Dockerfile b/ui/Dockerfile
index aab24dc..a1e4f6e 100644
--- a/ui/Dockerfile
+++ b/ui/Dockerfile
@@ -1,4 +1,4 @@
-FROM nginx:alpine
+FROM nginx:1.27-alpine3.21
 COPY . /usr/share/nginx/html
 EXPOSE 80
 CMD ["nginx", "-g", "daemon off;"]