make image based on distroless

.hadolint.yaml

@@ -1,2 +1,3 @@
 ignored:
   - DL3018
+  - DL3007

Dockerfile

@@ -1,11 +1,13 @@
-FROM --platform=$BUILDPLATFORM golang:1.21.5-alpine AS build
+FROM golang:1.21.5 AS build
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+RUN mkdir /storage
+
 WORKDIR /go/src/github.com/traPtitech/traQ
 
 COPY ./go.* ./
 RUN --mount=type=cache,target=/go/pkg/mod go mod download
 
-COPY . .
-
 ENV GOCACHE=/tmp/go/cache
 ENV CGO_ENABLED=0
 ARG TRAQ_VERSION=dev
@@ -16,19 +18,19 @@ ARG TARGETARCH
 ENV GOOS=$TARGETOS
 ENV GOARCH=$TARGETARCH
 
+COPY . .
 RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/tmp/go/cache \
   go build -o /traQ -ldflags "-s -w -X main.version=$TRAQ_VERSION -X main.revision=$TRAQ_REVISION"
 
-FROM alpine:3.19.0
+FROM gcr.io/distroless/base:latest
 WORKDIR /app
+EXPOSE 3000
 
-RUN apk add --no-cache --update ca-certificates && update-ca-certificates
+COPY --from=build /storage/ /app/storage/
+VOLUME /app/storage
 
 COPY --from=build /traQ ./
 
-VOLUME /app/storage
-EXPOSE 3000
-
-HEALTHCHECK CMD ./traQ healthcheck || exit 1
+HEALTHCHECK CMD ["./traQ", "healthcheck", "||", "exit", "1"]
 ENTRYPOINT ["./traQ"]
 CMD ["serve"]