From 72938a12750e7b08ddd6bd549c48cb57e4400305 Mon Sep 17 00:00:00 2001 From: Matt Collins Date: Wed, 4 Nov 2026 04:53:12 +0000 Subject: [PATCH 1/2] UID2-8254, UID2-8255: remove unused nginx image-filter module Co-Authored-By: Claude Sonnet 5.5 --- tools/hashing-tool/Dockerfile | 3 +++ tools/reverse-proxy/Dockerfile | 3 +++ web-integrations/google-secure-signals/client-side/Dockerfile | 3 +++ web-integrations/javascript-sdk/client-side/Dockerfile | 3 +++ .../prebid-integrations/client-side-deferred/Dockerfile | 3 +++ web-integrations/prebid-integrations/client-side/Dockerfile | 3 +++ web-integrations/prebid-secure-signals/client-side/Dockerfile | 3 +++ 7 files changed, 21 insertions(+) diff --git a/tools/hashing-tool/Dockerfile b/tools/hashing-tool/Dockerfile index f3b2d94e..656c44a1 100644 --- a/tools/hashing-tool/Dockerfile +++ b/tools/hashing-tool/Dockerfile @@ -3,6 +3,9 @@ FROM nginx:alpine # Install gettext for envsubst RUN apk add --no-cache gettext +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Copy static files COPY index.html /usr/share/nginx/html/index.html COPY app.css /usr/share/nginx/html/app.css diff --git a/tools/reverse-proxy/Dockerfile b/tools/reverse-proxy/Dockerfile index 653190e5..02e47625 100644 --- a/tools/reverse-proxy/Dockerfile +++ b/tools/reverse-proxy/Dockerfile @@ -6,6 +6,9 @@ RUN apk upgrade --no-cache # Install wget for healthcheck, gettext for envsubst, and openssl for fallback cert generation RUN apk add --no-cache wget gettext openssl +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Create templates directory RUN mkdir -p /etc/nginx/templates diff --git a/web-integrations/google-secure-signals/client-side/Dockerfile b/web-integrations/google-secure-signals/client-side/Dockerfile index dbd5db07..c9573d31 100644 --- a/web-integrations/google-secure-signals/client-side/Dockerfile +++ b/web-integrations/google-secure-signals/client-side/Dockerfile @@ -3,6 +3,9 @@ FROM nginx:alpine # Install gettext for envsubst RUN apk add --no-cache gettext +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Copy static files from client-side directory COPY html /usr/share/nginx/html/ diff --git a/web-integrations/javascript-sdk/client-side/Dockerfile b/web-integrations/javascript-sdk/client-side/Dockerfile index d4ff034f..ef27e5e0 100644 --- a/web-integrations/javascript-sdk/client-side/Dockerfile +++ b/web-integrations/javascript-sdk/client-side/Dockerfile @@ -3,6 +3,9 @@ FROM nginx:alpine # Install gettext for envsubst RUN apk add --no-cache gettext +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Copy static files from client-side directory COPY html /usr/share/nginx/html/ diff --git a/web-integrations/prebid-integrations/client-side-deferred/Dockerfile b/web-integrations/prebid-integrations/client-side-deferred/Dockerfile index 6e9a4d65..58578285 100644 --- a/web-integrations/prebid-integrations/client-side-deferred/Dockerfile +++ b/web-integrations/prebid-integrations/client-side-deferred/Dockerfile @@ -3,6 +3,9 @@ FROM nginx:alpine # Install gettext for envsubst RUN apk add --no-cache gettext +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Copy static files from client-side-deferred directory COPY client-side-deferred/app.css /usr/share/nginx/html/ COPY prebid.js /usr/share/nginx/html/ diff --git a/web-integrations/prebid-integrations/client-side/Dockerfile b/web-integrations/prebid-integrations/client-side/Dockerfile index 7b2e9eef..d85bcc32 100644 --- a/web-integrations/prebid-integrations/client-side/Dockerfile +++ b/web-integrations/prebid-integrations/client-side/Dockerfile @@ -3,6 +3,9 @@ FROM nginx:alpine # Install gettext for envsubst RUN apk add --no-cache gettext +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Copy static files from client-side directory COPY client-side/app.css /usr/share/nginx/html/ COPY prebid.js /usr/share/nginx/html/ diff --git a/web-integrations/prebid-secure-signals/client-side/Dockerfile b/web-integrations/prebid-secure-signals/client-side/Dockerfile index d31f195b..3450012c 100644 --- a/web-integrations/prebid-secure-signals/client-side/Dockerfile +++ b/web-integrations/prebid-secure-signals/client-side/Dockerfile @@ -3,6 +3,9 @@ FROM nginx:alpine # Install gettext for envsubst RUN apk add --no-cache gettext +# Remove the unused image-filter module and its image and font libraries +RUN apk del --no-cache nginx-module-image-filter + # Copy static files COPY client-side/app.css /usr/share/nginx/html/ COPY client-side/ads.css /usr/share/nginx/html/ From 130925bfe3f3a0c5a955aac8f9dce504dcf1026f Mon Sep 17 00:00:00 2001 From: Matt Collins Date: Wed, 4 Nov 2026 05:01:12 +0000 Subject: [PATCH 2/2] UID2-8254, UID2-8255: use nginx:alpine-slim base image Co-Authored-By: Claude Sonnet 5.5 --- tools/hashing-tool/Dockerfile | 5 +---- tools/reverse-proxy/Dockerfile | 5 +---- .../google-secure-signals/client-side/Dockerfile | 5 +---- web-integrations/javascript-sdk/client-side/Dockerfile | 5 +---- .../prebid-integrations/client-side-deferred/Dockerfile | 5 +---- web-integrations/prebid-integrations/client-side/Dockerfile | 5 +---- .../prebid-secure-signals/client-side/Dockerfile | 5 +---- 7 files changed, 7 insertions(+), 28 deletions(-) diff --git a/tools/hashing-tool/Dockerfile b/tools/hashing-tool/Dockerfile index 656c44a1..802bcd9c 100644 --- a/tools/hashing-tool/Dockerfile +++ b/tools/hashing-tool/Dockerfile @@ -1,11 +1,8 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Install gettext for envsubst RUN apk add --no-cache gettext -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Copy static files COPY index.html /usr/share/nginx/html/index.html COPY app.css /usr/share/nginx/html/app.css diff --git a/tools/reverse-proxy/Dockerfile b/tools/reverse-proxy/Dockerfile index 02e47625..2e56d876 100644 --- a/tools/reverse-proxy/Dockerfile +++ b/tools/reverse-proxy/Dockerfile @@ -1,4 +1,4 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Upgrade base Alpine packages to latest security builds (openssl/libssl3/libcrypto3, musl, zlib, libxml2, libexpat, nghttp2) RUN apk upgrade --no-cache @@ -6,9 +6,6 @@ RUN apk upgrade --no-cache # Install wget for healthcheck, gettext for envsubst, and openssl for fallback cert generation RUN apk add --no-cache wget gettext openssl -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Create templates directory RUN mkdir -p /etc/nginx/templates diff --git a/web-integrations/google-secure-signals/client-side/Dockerfile b/web-integrations/google-secure-signals/client-side/Dockerfile index c9573d31..a62e5b55 100644 --- a/web-integrations/google-secure-signals/client-side/Dockerfile +++ b/web-integrations/google-secure-signals/client-side/Dockerfile @@ -1,11 +1,8 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Install gettext for envsubst RUN apk add --no-cache gettext -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Copy static files from client-side directory COPY html /usr/share/nginx/html/ diff --git a/web-integrations/javascript-sdk/client-side/Dockerfile b/web-integrations/javascript-sdk/client-side/Dockerfile index ef27e5e0..1e57b5b3 100644 --- a/web-integrations/javascript-sdk/client-side/Dockerfile +++ b/web-integrations/javascript-sdk/client-side/Dockerfile @@ -1,11 +1,8 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Install gettext for envsubst RUN apk add --no-cache gettext -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Copy static files from client-side directory COPY html /usr/share/nginx/html/ diff --git a/web-integrations/prebid-integrations/client-side-deferred/Dockerfile b/web-integrations/prebid-integrations/client-side-deferred/Dockerfile index 58578285..4d35dc16 100644 --- a/web-integrations/prebid-integrations/client-side-deferred/Dockerfile +++ b/web-integrations/prebid-integrations/client-side-deferred/Dockerfile @@ -1,11 +1,8 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Install gettext for envsubst RUN apk add --no-cache gettext -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Copy static files from client-side-deferred directory COPY client-side-deferred/app.css /usr/share/nginx/html/ COPY prebid.js /usr/share/nginx/html/ diff --git a/web-integrations/prebid-integrations/client-side/Dockerfile b/web-integrations/prebid-integrations/client-side/Dockerfile index d85bcc32..e26dd231 100644 --- a/web-integrations/prebid-integrations/client-side/Dockerfile +++ b/web-integrations/prebid-integrations/client-side/Dockerfile @@ -1,11 +1,8 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Install gettext for envsubst RUN apk add --no-cache gettext -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Copy static files from client-side directory COPY client-side/app.css /usr/share/nginx/html/ COPY prebid.js /usr/share/nginx/html/ diff --git a/web-integrations/prebid-secure-signals/client-side/Dockerfile b/web-integrations/prebid-secure-signals/client-side/Dockerfile index 3450012c..ca3c5ce7 100644 --- a/web-integrations/prebid-secure-signals/client-side/Dockerfile +++ b/web-integrations/prebid-secure-signals/client-side/Dockerfile @@ -1,11 +1,8 @@ -FROM nginx:alpine +FROM nginx:alpine-slim # Install gettext for envsubst RUN apk add --no-cache gettext -# Remove the unused image-filter module and its image and font libraries -RUN apk del --no-cache nginx-module-image-filter - # Copy static files COPY client-side/app.css /usr/share/nginx/html/ COPY client-side/ads.css /usr/share/nginx/html/