fix: Dockerfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-ALPINE319-BUSYBOX-6913413
- https://snyk.io/vuln/SNYK-ALPINE319-BUSYBOX-6913413
- https://snyk.io/vuln/SNYK-ALPINE319-BUSYBOX-6928845
- https://snyk.io/vuln/SNYK-ALPINE319-BUSYBOX-6928846
- https://snyk.io/vuln/SNYK-ALPINE319-BUSYBOX-6928847

.github/workflows/build_base.yaml

@@ -36,15 +36,15 @@ jobs:
                 include:
                     - core: ${{ needs.versions.outputs.coreversion }}
                       os: alpine
-                      os_version: "3.20"
-                      golang: golang:1.23-alpine3.20
+                      os_version: "3.19"
+                      golang: golang:1.22-alpine3.19
                       platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6
                       branch: main
                       latest: yes
                     - core: ${{ needs.versions.outputs.coreversion }}
                       os: ubuntu
                       os_version: "22.04"
-                      golang: golang:1.23-alpine3.20
+                      golang: golang:1.22-alpine3.19
                       platforms: linux/amd64
                       branch: main
                       latest: yes

.github/workflows/build_base_dev.yaml

@@ -16,13 +16,13 @@ jobs:
             matrix:
                 include:
                     - os: alpine
-                      os_version: "3.23"
-                      golang: golang:1.26-alpine3.23
+                      os_version: "3.19"
+                      golang: golang:1.22-alpine3.19
                       platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6
                       branch: dev
                     - os: ubuntu
-                      os_version: "24.04"
-                      golang: golang:1.26-alpine3.23
+                      os_version: "22.04"
+                      golang: golang:1.22-alpine3.19
                       platforms: linux/amd64
                       branch: dev
 

.github/workflows/build_base_vod.yaml

@@ -14,15 +14,11 @@ jobs:
             matrix:
                 include:
                     - os: alpine
-                      os_version: "3.23"
-                      golang: golang:1.26-alpine3.23
+                      os_version: "3.19"
+                      golang: golang:1.22-alpine3.19
                       platforms: linux/amd64,linux/arm64,linux/arm/v7
                       branch: vod
-                    - os: ubuntu
-                      os_version: "24.04"
-                      golang: golang:1.26-alpine3.23
-                      platforms: linux/amd64
-                      branch: vod
+                      key: alpine3.19
 
         steps:
             - name: Checkout

.github/workflows/build_bundle.yaml

@@ -35,17 +35,17 @@ jobs:
             matrix:
                 include:
                     - core: ${{ needs.versions.outputs.coreversion }}
-                      core_os: alpine3.20
+                      core_os: alpine3.19
                       ffmpeg: "6.1.1"
-                      ffmpeg_os: alpine3.20
+                      ffmpeg_os: alpine3.19
                       platforms: linux/amd64,linux/arm64,linux/arm/v7
                       branch: main
                       prefix:
                       latest: yes
                     - core: ${{ needs.versions.outputs.coreversion }}
-                      core_os: alpine3.20
+                      core_os: alpine3.19
                       ffmpeg: "6.1.1-rpi"
-                      ffmpeg_os: alpine3.20
+                      ffmpeg_os: alpine3.19
                       platforms: linux/arm64,linux/arm/v7
                       branch: main
                       prefix: rpi-

.github/workflows/build_bundle_dev.yaml

@@ -13,31 +13,31 @@ jobs:
         strategy:
             matrix:
                 include:
-                    - core_os: alpine3.23
-                      ffmpeg: "7.1.1"
-                      ffmpeg_os: alpine3.23
+                    - core_os: alpine3.19
+                      ffmpeg: "6.1.1"
+                      ffmpeg_os: alpine3.19
                       platforms: linux/amd64,linux/arm64,linux/arm/v7
                       branch: dev
                       prefix:
                       latest: yes
-                    - core_os: alpine3.23
-                      ffmpeg: "7.1.1-rpi"
-                      ffmpeg_os: alpine3.23
+                    - core_os: alpine3.19
+                      ffmpeg: "6.1.1-rpi"
+                      ffmpeg_os: alpine3.19
                       platforms: linux/arm64,linux/arm/v7
                       branch: dev
                       prefix: rpi-
                       latest: yes
-                    - core_os: ubuntu24.04
-                      ffmpeg: "7.1.1-vaapi"
-                      ffmpeg_os: ubuntu24.04
+                    - core_os: ubuntu22.04
+                      ffmpeg: "6.1.1-vaapi"
+                      ffmpeg_os: ubuntu22.04
                       platforms: linux/amd64
                       branch: dev
                       prefix: vaapi-
                       latest: yes
-                    - core_os: ubuntu24.04
-                      ffmpeg: "7.1.1-cuda"
-                      ffmpeg_os: ubuntu24.04
-                      ffmpeg_tags: "-cuda12.9.1"
+                    - core_os: ubuntu22.04
+                      ffmpeg: "6.1.1-cuda"
+                      ffmpeg_os: ubuntu22.04
+                      ffmpeg_tags: "-cuda11.7.1"
                       platforms: linux/amd64
                       branch: dev
                       prefix: cuda-

Dockerfile

@@ -1,9 +1,9 @@
 ARG GOLANG_IMAGE=golang:1.22-alpine3.19
-ARG BUILD_IMAGE=alpine:3.19
+ARG BUILD_IMAGE=alpine:3
 
 # Cross-Compilation
 # https://www.docker.com/blog/faster-multi-platform-builds-dockerfile-cross-compilation-guide/
-FROM --platform=$BUILDPLATFORM $GOLANG_IMAGE AS builder
+FROM --platform=$BUILDPLATFORM $GOLANG_IMAGE as builder
 
 ARG TARGETOS TARGETARCH TARGETVARIANT
 ENV GOOS=$TARGETOS GOARCH=$TARGETARCH GOARM=$TARGETVARIANT