feat: use hardened image

This commit is contained in:
2026-02-14 16:52:54 -06:00
parent 0f403fa274
commit d464f0fe43

View File

@@ -1,15 +1,13 @@
ARG REGISTRY=docker.io
FROM ${REGISTRY}/node:24.13.1-alpine AS base
FROM docker.io/node:24.13.1-alpine AS builder
ENV PNPM_HOME="/pnpm"
ENV PATH="$PNPM_HOME:$PATH"
RUN corepack enable
WORKDIR /app
COPY package.json pnpm-lock.yaml ./
FROM base AS prod-deps
FROM builder AS prod-deps
RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --prod --frozen-lockfile
FROM prod-deps AS build-deps
@@ -18,9 +16,9 @@ RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm install --frozen-lockfile
FROM build-deps AS build
COPY . .
RUN pnpm run build
RUN pnpm prune --prod
FROM base AS runtime
FROM dhi.io/node:24.13.1 AS runtime
WORKDIR /app
COPY --from=prod-deps /app/node_modules /app/node_modules
COPY --from=build /app/dist /app/dist