From b5551fffba6e450f507a20b596c32a9216922424 Mon Sep 17 00:00:00 2001 From: Paulo Telles Date: Wed, 6 Jul 2022 18:17:20 +0200 Subject: [PATCH] improve dockerfile to fix snyk security issues (#38) Co-authored-by: p.souza --- Dockerfile | 21 +++++++++++++++++---- 1 file changed, 17 insertions(+), 4 deletions(-) diff --git a/Dockerfile b/Dockerfile index 34e9a4a..22b7e69 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,10 +1,23 @@ -FROM node:lts-slim +FROM --platform=linux/amd64 node:16.15.1-alpine as base + +RUN apk --update --no-cache add --virtual .builds-deps build-base python3 + WORKDIR /opt/app/ + +FROM base as build + COPY package.json package-lock.json ./ + RUN npm ci -RUN npm prune -COPY . /opt/app + +COPY . . + +FROM base + +COPY --from=build /opt/app /opt/app/ + ARG NODE_ENV + ENV NODE_ENV $NODE_ENV -CMD [ "npm", "start" ] \ No newline at end of file +CMD [ "node", "app.js" ]