From ef803a1180118ea5d8e65216d32b9c909cca941c Mon Sep 17 00:00:00 2001
From: Akash Purushotham <akashpurushotham333@gmail.com>
Date: Wed, 21 Oct 2026 20:57:41 +0530
Subject: [PATCH] build: upgrade Docker base image to debian:13-slim

Move the runtime image from debian:12 to debian:13-slim, apply pending
security updates at build time, install ca-certificates and curl without
recommended packages, and clean the apt lists.

This removes all critical and fixable OS-level CVEs reported by Trivy
on the published v1.30.0 image and reduces the image size from 261 MB
to 158 MB.

Refs #592
---
 Dockerfile | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index f9cf3024..ad2c9117 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,9 @@
-FROM debian:12
+FROM debian:13-slim
 
-RUN apt update && apt install -y ca-certificates curl
+RUN apt-get update && \
+    apt-get upgrade -y && \
+    apt-get install -y --no-install-recommends ca-certificates curl && \
+    rm -rf /var/lib/apt/lists/*
 
 COPY chproxy /