From 69a815661ac75ae815bb24754ce425378c51ea06 Mon Sep 17 00:00:00 2001 From: Beth Skurrie Date: Fri, 1 Sep 2017 11:28:24 +1000 Subject: [PATCH] fix(ruby): update rubygems Update rubygems for vulnerabilities listed here: # https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/ --- Dockerfile | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Dockerfile b/Dockerfile index fe5ff00..b250644 100644 --- a/Dockerfile +++ b/Dockerfile @@ -16,6 +16,10 @@ ADD pact_broker/Gemfile $APP_HOME/ ADD pact_broker/Gemfile.lock $APP_HOME/ RUN chown -R app:app $APP_HOME +# Update system gems for: +# https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/ +RUN gem update --system +RUN gem install bundler RUN su app -c "cd $APP_HOME && bundle install --deployment --without='development test'" ADD pact_broker/ $APP_HOME/ RUN chown -R app:app $APP_HOME