feat: Second registry, security hardening

- Added second registry - Added non-root user - Added supply-chain attestation flags
2025-02-23 17:58:02 +01:00
parent fef09beaf3
commit b031dc1ac3
3 changed files with 79 additions and 5 deletions
--- a/latest/Dockerfile
+++ b/latest/Dockerfile
@ -1,5 +1,6 @@
 FROM node:alpine as BASE
 ENV PNPM_HOME="./.pnpm" \
  PATH="$PNPM_HOME:$PATH"
-RUN npm i -g pnpm@latest &&\
-  apk add --no-cache openssl
+RUN wget -qO- https://get.pnpm.io/install.sh | ENV="$HOME/.shrc" SHELL="$(which sh)" sh - &&\
+  apk add --no-cache openssl
+USER node