feat: Enhance Dockerfile security with non-root users and correct file permissions, and adjust Gitea workflow action versions.

2026-03-17 02:47:57 +03:00
parent d69eab1c12
commit 04feb5a3c3
3 changed files with 16 additions and 8 deletions
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -6,6 +6,11 @@ COPY src ./src
 RUN mvn package -DskipTests -B

 FROM eclipse-temurin:17-jre-alpine
+
+# Best practice: run as a non-root user
+RUN addgroup -S spring && adduser -S spring -G spring
+USER spring:spring
+
 WORKDIR /app
 COPY --from=build /app/target/app.jar app.jar
 EXPOSE 8080