fix: remove webrick 1.4.2 due to vulnerabilities

Fixes: #29
pact-foundation · Jul 24, 2020 · bbd4c21 · bbd4c21
1 parent 85944c8
commit bbd4c21
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -17,6 +17,8 @@ RUN set -ex && \
   gem install bundler -v $(cat BUNDLER_VERSION) && \
   ls /usr/local/lib/ruby/gems/2.6.0 && \
   gem uninstall --install-dir /usr/local/lib/ruby/gems/2.6.0 -x rake && \
+  find /usr/local/lib/ruby -name webrick* -exec rm -rf {} + && \
+  gem install webrick -v '~>1.6' && \
   bundle config set deployment 'true' && \
   bundle config set no-cache 'true' && \
   bundle install --without='development test' && \