Fix security issues in Dockerfile

MinBZK · May 1, 2024 · dcb1321 · dcb1321
1 parent bcc40f2
commit dcb1321
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -29,7 +29,10 @@ ENV PATH="/app/.venv/bin:$PATH"
 
 FROM project-base AS development
 
-COPY . .
+COPY ./tad/ ./tad/
+COPY ./tests/ ./tests/
+COPY ./script/ ./script/
+COPY ./README.md ./README.md
 RUN poetry install
 
 FROM development AS lint
@@ -44,7 +47,9 @@ RUN coverage report
 
 FROM project-base AS production
 
-COPY ./tad /app/tad
+USER tad
+
+COPY --chown=root:root --chmod=755 ./tad /app/tad
 
 # change this to a usefull command
 CMD ["python", "-m", "tad" ]