fix(#14): distroless debian13 runtime for node-webapp #15

Merged
KofTwentyTwo merged 1 commits from feature/GH-14-distroless-debian13 into develop 2026-09-23 22:52:03 +00:00
KofTwentyTwo commented 2026-09-23 22:51:11 +00:00 (Migrated from github.com)

Generated node-webapp Dockerfiles (npm and pnpm) now share one runtime image variable, defaulting to gcr.io/distroless/nodejs<N>-debian13.

  • debian12 (libssl3 3.0.18): 1 CRITICAL + 5 HIGH in Trivy 0.69.3; debian13: 0.
  • Tests: debian13 runner for npm and pnpm, no debian12 anywhere. make all green (lint, orb validate, all suites).
  • Repository-owned Dockerfiles (docker.use_repo_dockerfile) are unaffected.

Closes #14

🤖 Generated with Claude Code

Generated node-webapp Dockerfiles (npm and pnpm) now share one runtime image variable, defaulting to `gcr.io/distroless/nodejs<N>-debian13`. - debian12 (libssl3 3.0.18): 1 CRITICAL + 5 HIGH in Trivy 0.69.3; debian13: 0. - Tests: debian13 runner for npm and pnpm, no debian12 anywhere. `make all` green (lint, orb validate, all suites). - Repository-owned Dockerfiles (`docker.use_repo_dockerfile`) are unaffected. Closes #14 🤖 Generated with [Claude Code](https://claude.com/claude-code)
Sign in to join this conversation.