dockerfile: drop privileges to regular user
Some checks are pending
CodeQL / Analyze (${{ matrix.language }}) (none, javascript-typescript) (push) Waiting to run
Run tests / check lockfile correctness (push) Waiting to run
Run tests / web sanity check (push) Waiting to run
Run tests / api sanity check (push) Waiting to run

This commit is contained in:
jj 2024-11-19 14:20:12 +00:00
parent ea73d09c8f
commit 7b9830c5af
No known key found for this signature in database

View file

@ -17,8 +17,10 @@ RUN pnpm deploy --filter=@imput/cobalt-api --prod /prod/api
FROM base AS api FROM base AS api
WORKDIR /app WORKDIR /app
COPY --from=build /prod/api /app COPY --from=build --chown=node:node /prod/api /app
COPY --from=build /app/.git /app/.git COPY --from=build --chown=node:node /app/.git /app/.git
USER node
EXPOSE 9000 EXPOSE 9000
CMD [ "node", "src/cobalt" ] CMD [ "node", "src/cobalt" ]