ci: security update

.github/workflows/main.yml

@@ -55,20 +55,20 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Log in to the Container registry
-        uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
+        uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@507c2f2dc502c992ad446e3d7a5dfbe311567a96
+        uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: true
@@ -84,4 +84,4 @@ jobs:
       - name: Trigger deploy webhook
         uses: wei/curl@master
         with:
-          args: ${{ secrets.DEPLOY_WEBHOOK_URL }}
+          args: ${{ vars.DEPLOY_WEBHOOK_URL }}?secret=${{ secrets.DEPLOY_WEBHOOK_SECRET }}

Dockerfile

@@ -1,6 +1,6 @@
 FROM node:18-alpine
 
-ENV RUNTIME_ENV container
+ENV RUNTIME_ENV=container
 
 RUN adduser -u 3000 -D recv