diff --git a/images/nginx/rootfs/Dockerfile b/images/nginx/rootfs/Dockerfile
index c1ce95bc5..07c837d47 100644
--- a/images/nginx/rootfs/Dockerfile
+++ b/images/nginx/rootfs/Dockerfile
@@ -32,7 +32,9 @@ COPY --from=builder /usr/local /usr/local
 COPY --from=builder /opt /opt
 COPY --from=builder /etc/nginx /etc/nginx
 
-RUN apk add -U --no-cache \
+RUN apk update \
+  && apk upgrade \
+  && apk add -U --no-cache \
     bash \
     openssl \
     pcre \
diff --git a/rootfs/Dockerfile b/rootfs/Dockerfile
index 70ff1252c..5b6116e91 100644
--- a/rootfs/Dockerfile
+++ b/rootfs/Dockerfile
@@ -27,9 +27,12 @@ LABEL org.opencontainers.image.version="${VERSION}"
 
 WORKDIR  /etc/nginx
 
-RUN apk add -U --no-cache \
-  diffutils \
-  libcap
+RUN apk update \
+  && apk upgrade \
+  && apk add -U --no-cache \
+    diffutils \
+    libcap \
+  && rm -rf /var/cache/apk/*
 
 COPY --chown=www-data:www-data . /