ci: fix security issues in Dockerfile

one-zero-eight · Sep 29, 2024 · 48c72dc · 48c72dc
1 parent b10ab1a
commit 48c72dc
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/api.Dockerfile b/api.Dockerfile
@@ -23,23 +23,23 @@ ENV PATH="$POETRY_HOME/bin:$VENV_PATH/bin:$PATH"
 FROM base AS builder
 RUN apt-get update \
     && apt-get install --no-install-recommends -y \
+        build-essential \
         curl \
-        vim \
         netcat \
-        build-essential \
+        vim \
     && rm -rf /var/lib/apt/lists/*
 
 # Install Poetry. Respects $POETRY_VERSION and $POETRY_HOME
 ENV POETRY_VERSION=1.8.3
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
-RUN curl -sSL https://install.python-poetry.org | POETRY_HOME=${POETRY_HOME} python3 - --version ${POETRY_VERSION} && \
+RUN curl -sS https://install.python-poetry.org | POETRY_HOME=${POETRY_HOME} python3 - --version ${POETRY_VERSION} && \
     chmod a+x /opt/poetry/bin/poetry
 
 # We copy our Python requirements here to cache them
 # and install only runtime deps using poetry
 WORKDIR $PYSETUP_PATH
 COPY ./poetry.lock ./pyproject.toml ./
-RUN poetry install
+RUN poetry install --no-interaction
 
 
 ###########################################################

diff --git a/bot.Dockerfile b/bot.Dockerfile
@@ -23,23 +23,23 @@ ENV PATH="$POETRY_HOME/bin:$VENV_PATH/bin:$PATH"
 FROM base AS builder
 RUN apt-get update \
     && apt-get install --no-install-recommends -y \
+        build-essential \
         curl \
-        vim \
         netcat \
-        build-essential \
+        vim \
     && rm -rf /var/lib/apt/lists/*
 
 # Install Poetry. Respects $POETRY_VERSION and $POETRY_HOME
 ENV POETRY_VERSION=1.8.3
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
-RUN curl -sSL https://install.python-poetry.org | POETRY_HOME=${POETRY_HOME} python3 - --version ${POETRY_VERSION} && \
+RUN curl -sS https://install.python-poetry.org | POETRY_HOME=${POETRY_HOME} python3 - --version ${POETRY_VERSION} && \
     chmod a+x /opt/poetry/bin/poetry
 
 # We copy our Python requirements here to cache them
 # and install only runtime deps using poetry
 WORKDIR $PYSETUP_PATH
 COPY ./poetry.lock ./pyproject.toml ./
-RUN poetry install
+RUN poetry install --no-interaction
 
 
 ###########################################################