Merge pull request #6 from FortnoxAB/curantes-distroless-nonroot

curantes · web-flow · commit 50dc68406f10 · 2022-08-16T14:27:55.000+02:00
Switch to distroless image and don't run as root
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.8
-RUN apk add --no-cache ca-certificates
+FROM gcr.io/distroless/static-debian11:nonroot
 COPY bitbucket-slack-bot /
+USER nonroot
 ENTRYPOINT ["/bitbucket-slack-bot"]
