fix(docker): non-root user, supply chain attestations, build cleanup #44

Merged
lerko merged 3 commits from fix/docker-compliance into main 2026-06-01 22:48:33 +00:00
2 changed files with 4 additions and 2 deletions
Showing only changes of commit 8d34524aa0 - Show all commits
+2 -2
View File
@@ -19,10 +19,10 @@ FROM alpine:3.23
WORKDIR /app
RUN apk add --no-cache ca-certificates && apk upgrade --no-cache
RUN addgroup -g 1000 -S uptop && adduser -u 1000 -S uptop -G uptop
RUN mkdir /data && chown uptop:uptop /data
RUN mkdir -p /data/.ssh && chown -R uptop:uptop /data
COPY --from=builder /app/uptop .
COPY docker-entrypoint.sh /usr/local/bin/
COPY --chmod=755 docker-entrypoint.sh /usr/local/bin/
ENV LIPGLOSS_RENDERER_HAS_DARK_BACKGROUND=true
ENV UPTOP_DB_TYPE=sqlite
+2
View File
@@ -9,4 +9,6 @@ if [ ! -w /data ]; then
exit 1
fi
mkdir -p /data/.ssh
exec "$@"