Merge pull request #123 from Conjur-Enterprise/snyk-fix

CNJR-0000: Run apk upgrade in container image

Author: gl-johnson

CHANGELOG.md

@@ -6,7 +6,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
-## [1.9.0] - 2026-03-05
+## [1.9.0] - 2026-03-09
 
 ### Added
 - Support for standalone mode config (CNJR-12577)

Dockerfile

@@ -64,10 +64,8 @@ RUN go build -a -installsuffix cgo -gcflags="all=-N -l" -o secrets-provider ./cm
 FROM alpine:latest AS secrets-provider-base
 LABEL maintainer="CyberArk Software Ltd."
 
-# Ensure openssl development libraries are always up to date
-RUN apk add --no-cache openssl-dev
-
-RUN apk add -u --no-cache shadow libc6-compat && \
+RUN apk update && apk upgrade --no-cache && \
+    apk add --no-cache openssl-dev shadow libc6-compat && \
     # Add limited user
     groupadd -r secrets-provider \
              -g 777 && \