pm/website-secure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sonar v2
DevSecOps Enterprise Pipeline / security-gate-and-deploy (pull_request) Successful in 56s
Details

Browse Source
This commit is contained in:
pm
2026-06-13 00:04:18 +01:00
parent 500972ea6f
commit 432d3d8840
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/Dockerfile
+7 -7
View File
@@ -1,12 +1,12 @@
FROM node:22-alpine FROM node:22-alpine
RUN apk update && apk upgrade --no-cache # ==========================================
# DEVSECOPS: HARDENING DA IMAGEM BASE
# 2. Atualiza a versão global do gestor NPM (Corrige tar, glob, minimatch) # ==========================================
RUN npm install -g npm@latest # Agrupamos os comandos RUN num só para otimizar as camadas da imagem (Regra do SonarQube)
RUN apk update && apk upgrade --no-cache && \
# Cria um grupo e um utilizador sem privilégios npm install -g npm@latest && \
RUN addgroup -S appgroup && adduser -S appuser -G appgroup addgroup -S appgroup && adduser -S appuser -G appgroup
# Define o diretório de trabalho # Define o diretório de trabalho
WORKDIR /usr/src/app WORKDIR /usr/src/app