Merge pull request #26 from hjmcnew/fix-sarif-findings

Update Dockerfile

Author: hjmcnew

Dockerfile

@@ -11,19 +11,20 @@ ENV DEBIAN_FRONTEND=noninteractive \
 # Update and install in a single RUN instruction to reduce layers
 # Pin specific versions for better reproducibility
 RUN apk add --no-cache \
-    dnscrypt-proxy=2.1.5-r9 \
-    ca-certificates \
-    tzdata \
-    netcat-openbsd
+    dnscrypt-proxy=2.1.5-r11 \
+    ca-certificates=20241121-r1 \
+    tzdata=2025b-r0 \
+    netcat-openbsd=1.226.1.1-r0
 
 # Create directory for custom configuration
 RUN mkdir -p /etc/dnscrypt-proxy && \
     chown -R dnscrypt:dnscrypt /etc/dnscrypt-proxy
 
 # Copy a custom configuration file that uses port 5053 instead of 53
-COPY --chown=dnscrypt:dnscrypt dnscrypt-proxy.toml /etc/dnscrypt-proxy/dnscrypt-proxy.toml
-COPY --chown=dnscrypt:dnscrypt forwarding-rules.txt /etc/dnscrypt-proxy/forwarding-rules.txt
+COPY dnscrypt-proxy.toml /etc/dnscrypt-proxy/dnscrypt-proxy.toml
+COPY forwarding-rules.txt /etc/dnscrypt-proxy/forwarding-rules.txt
 
+RUN chown -R dnscrypt:dnscrypt /etc/dnscrypt-proxy
 
 # DNSCrypt-proxy uses non-privileged ports inside container
 # EXPOSE 53/udp 53/tcp