demo
86003f2adc
14-stage Jenkins pipeline with real scanners (Semgrep, Gitleaks, Trivy, SonarQube, Checkov, ZAP, Cosign), Helm chart, DefectDojo integration. Includes CWE-89, CWE-79, CWE-798, CWE-22, CWE-330 for SAST/secrets demo.
13 lines
341 B
Docker
13 lines
341 B
Docker
# Build stage: standard node image (root, npm can write). Runtime: Chainguard zero-CVE base.
|
|
FROM public.ecr.aws/docker/library/node:20-alpine AS build
|
|
WORKDIR /app
|
|
COPY package*.json ./
|
|
RUN npm install --omit=dev
|
|
COPY src/ ./src/
|
|
|
|
FROM cgr.dev/chainguard/node:latest
|
|
WORKDIR /app
|
|
COPY --from=build /app ./
|
|
EXPOSE 3000
|
|
CMD ["src/server.js"]
|