Skip to content

Conversation

@AizuddinAkmal
Copy link
Contributor

I've updated the Dockerfile to implement more secure features/configuration
Changes made:

  • Using Debian as the base Node image instead of the unofficially supported Alpine image
  • Explicitly configure yarn to explicitly only install production dependencies
  • Run the container as a non-root user and ensure files are owned by the non-root user
  • Inclusion of dumb-init to allow proper handling of signals

References:

@Alee14 Alee14 merged commit eeefe31 into Alee14:stable Apr 6, 2024
@Alee14
Copy link
Owner

Alee14 commented Apr 6, 2024

Done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants