Build multi-platform images

Refactor GitHub Actions workflow for build
Run Dockle and Trivy, upload sarif reports to GitHub
Refactor Dockerfiles based on best practices
This commit is contained in:
David Howell
2024-02-06 05:01:22 +00:00
parent d2faddc505
commit 2cae5296a2
8 changed files with 152 additions and 32 deletions

View File

@@ -1,3 +1,5 @@
**/node_modules
**/npm-debug.log
**/.env
**/.env
.eslint*
Dockerfile

View File

@@ -24,6 +24,12 @@ ENV NODE_ENV production
COPY --from=builder /app ./
RUN npm prune --omit=dev
# CIS-DI-0001
RUN addgroup -S addon && adduser -S -G addon addon
USER addon
EXPOSE 7000
ENTRYPOINT [ "pm2-runtime", "start", "ecosystem.config.cjs"]
ENTRYPOINT [ "pm2-runtime", "start", "ecosystem.config.cjs"]
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
CMD pm2 ping || exit 1