fix(ruby): update rubygems

Update rubygems for vulnerabilities listed here: # https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/
DiUS · Sep 1, 2017 · 69a8156 · 69a8156
1 parent 738d558
commit 69a8156
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -16,6 +16,10 @@ ADD pact_broker/Gemfile $APP_HOME/
 ADD pact_broker/Gemfile.lock $APP_HOME/
 RUN chown -R app:app $APP_HOME
 
+# Update system gems for:
+# https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/
+RUN gem update --system
+RUN gem install bundler
 RUN su app -c "cd $APP_HOME && bundle install --deployment --without='development test'"
 ADD pact_broker/ $APP_HOME/
 RUN chown -R app:app $APP_HOME