Eventsbuildingblock dockerfile alpine

CHANGELOG.md

@@ -5,6 +5,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Fixed
+- Docker image vulnerabilities in Events Building Block. [#484](https://github.com/rokwire/rokwire-building-blocks-api/issues/484)
+
 ### Added
 - Add Standard License Header for Events Building Block. [#480](https://github.com/rokwire/rokwire-building-blocks-api/issues/480)
 - Add Standard License Header for Authentication Building Block [#497](https://github.com/rokwire/rokwire-building-blocks-api/issues/497)

eventservice/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3
+FROM python:3-alpine3.11
 
 LABEL maintainer="[email protected]"
 
@@ -8,7 +8,14 @@ WORKDIR /app
 COPY eventservice/events.yaml /app/
 COPY eventservice /app/eventservice/
 COPY lib /lib/
-RUN pip install -r /app/eventservice/requirements.txt
+
+
+RUN apk --update add python3 py3-pip openssl ca-certificates py3-openssl && \
+  apk --update add --virtual build-dependencies libffi-dev openssl-dev python3-dev py3-pip build-base && \
+  pip install --upgrade pip && \
+  pip install -r /app/eventservice/requirements.txt --no-cache-dir && \
+  apk del build-dependencies
+
 
 VOLUME /var/cache/app
 WORKDIR /app/eventservice/api