tools/knightcrawler
1
0
Fork 0
mirror of https://github.com/knightcrawler-stremio/knightcrawler.git synced 2024-12-20 03:29:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Build multi-platform images

Browse Source 
Refactor GitHub Actions workflow for build
Run Dockle and Trivy, upload sarif reports to GitHub
Refactor Dockerfiles based on best practices
This commit is contained in:
David Howell
2024-02-06 05:01:22 +00:00
parent d2faddc505
commit 2cae5296a2
8 changed files with 152 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/node/consumer/.dockerignore
View File

@@ -12,4 +12,5 @@ helm-charts
.env
.editorconfig
.idea
coverage*
coverage*
.eslint*

11
src/node/consumer/Dockerfile
View File

@@ -21,6 +21,13 @@ ENV NODE_ENV production
COPY --from=builder /app ./
RUN npm prune --omit=dev
EXPOSE 7001
# CIS-DI-0001
RUN useradd -d /home/consumer -m -s /bin/bash consumer
# CIS-DI-0008
RUN chmod u-s /usr/bin/wall /usr/bin/expiry /usr/bin/chage /usr/bin/passwd /usr/bin/gpasswd /usr/bin/chsh /usr/bin/newgrp /usr/bin/chfn /sbin/unix_chkpwd /bin/su /bin/mount /bin/umount /usr/bin/chage /usr/bin/expiry /usr/bin/wall
USER consumer
ENTRYPOINT [ "node", "dist/index.cjs" ]
EXPOSE 7001
ENTRYPOINT [ "node", "dist/index.cjs" ]
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 \
CMD pgrep -x node > /dev/null || exit 1