Merge pull request #20 from cahaseler/security-docker

fix: Use non-root user in docker file for security
cahaseler · May 29, 2024 · b82c4c3 · b82c4c3
2 parents af67c7e + 7fbb739
commit b82c4c3
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.github/workflows/on_main.yml b/.github/workflows/on_main.yml
@@ -8,6 +8,8 @@ on:
 
 jobs:
   build_and_release:
+    concurrency:
+      group: ${{ github.workflow }}
     runs-on: windows-latest
     permissions:
       contents: write
@@ -23,10 +25,10 @@ jobs:
           ref: main
           persist-credentials: false
 
-      - name: Install node 18
+      - name: Install node 20
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 20
           cache: yarn
           cache-dependency-path: yarn.lock
 

diff --git a/web/Dockerfile b/web/Dockerfile
@@ -9,4 +9,7 @@ ENV NODE_ENV=production \
 
 EXPOSE 3000
 
+# Use a non-root user for security
+USER node
+
 CMD ["node", "server.js"]