Skip to content

fix: improve Docker Scout scores for clickstack images #1731

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kodiakhq merged 4 commits into from
Feb 13, 2026
Merged

fix: improve Docker Scout scores for clickstack images #1731

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
9558a9f
fix: improve Docker Scout scores for clickstack images
motsc Feb 13, 2026
c001be1
Merge branch 'main' into hyperdx-fix-others
motsc Feb 13, 2026
b2ed721
fix: update ClickHouse to 25.12-alpine for additional security fixes
motsc Feb 13, 2026
03fee17
Merge branch 'main' into hyperdx-fix-others
kodiakhq[bot] Feb 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions docker/hyperdx/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@
# - Mongo
# - Otel Collector (otelcol)

ARG NODE_VERSION=22.16.0
ARG CLICKHOUSE_VERSION=25.6
ARG NODE_VERSION=22.22
ARG CLICKHOUSE_VERSION=25.12
ARG OTEL_COLLECTOR_VERSION=0.145.0
ARG OTEL_COLLECTOR_OPAMPSUPERVISOR_VERSION=0.145.0

Expand All @@ -19,7 +19,7 @@ FROM otel/opentelemetry-collector-opampsupervisor:${OTEL_COLLECTOR_OPAMPSUPERVIS
FROM kukymbr/goose-docker@sha256:0cd025636df126e7f66472861ca4db3683bc649be46cd1f6ef1a316209058e23 AS goose

# Build the Go migration tool with full TLS support for ClickHouse
FROM golang:1.25-alpine AS migrate-builder
FROM golang:1.26-alpine AS migrate-builder
WORKDIR /build
COPY packages/otel-collector/go.mod packages/otel-collector/go.sum ./
RUN go mod download
Expand Down Expand Up @@ -54,9 +54,9 @@ COPY --from=app ./public ./packages/app/public
COPY --from=app ./styles ./packages/app/styles
COPY --from=app ./types ./packages/app/types

ENV NEXT_TELEMETRY_DISABLED 1
ENV NEXT_OUTPUT_STANDALONE true
ENV NEXT_PUBLIC_IS_LOCAL_MODE false
ENV NEXT_TELEMETRY_DISABLED=1
ENV NEXT_OUTPUT_STANDALONE=true
ENV NEXT_PUBLIC_IS_LOCAL_MODE=false
ENV NX_DAEMON=false
RUN npx nx run-many --target=build --projects=@hyperdx/common-utils,@hyperdx/api,@hyperdx/app
RUN rm -rf node_modules && yarn workspaces focus @hyperdx/api --production
Expand All @@ -74,7 +74,7 @@ LABEL org.opencontainers.image.vendor="HyperDX" \
ARG CODE_VERSION

ENV CODE_VERSION=$CODE_VERSION
ENV NODE_ENV production
ENV NODE_ENV=production

# Install libs used for the start script
RUN npm install -g concurrently@9.1.0
Expand Down Expand Up @@ -153,7 +153,7 @@ RUN echo 'http://dl-cdn.alpinelinux.org/alpine/v3.9/main' >> /etc/apk/repositori
install -d -m 0777 -o ${USER_UID} -g ${USER_GID} /etc/otel/supervisor-data && \
rm -rf /var/cache/apk/*

ENV NODE_ENV production
ENV NODE_ENV=production

# Set up App (copy from prod stage)
COPY --from=prod /app /app
Expand Down
9 changes: 8 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,13 @@
"@types/react": "19.0.7",
"@types/react-dom": "19.0.3",
"@types/express": "4.17.21",
"@types/express-serve-static-core": "4.17.43"
"@types/express-serve-static-core": "4.17.43",
"express": "^4.20.0",
"send": "^0.19.0",
"serve-static": "^1.16.0",
"cookie": "^0.7.0",
"brace-expansion": "^2.0.2",
"diff": "^5.2.2",
"on-headers": "^1.1.0"
}
}
Loading
Loading