Update protobufjs to 7.0.5 to avoid CVE-2023-36665, remove dev depend…

…encies to fix CVE-2022-35177, make production container non root
metrico · Jan 16, 2024 · ea1f59b · ea1f59b
1 parent 526991a
commit ea1f59b
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 10,383 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -3,7 +3,11 @@ FROM node:20-slim
 
 COPY . /app
 WORKDIR /app
-RUN npm install
+
+RUN groupadd -r qryn && useradd -r -g qryn -m qryn && chown -R qryn:qryn /app
+USER qryn
+
+RUN npm install --omit=dev
 
 # Expose Ports
 EXPOSE 3100