demo
2049754b67
Node/Express, intentionally outdated deps (express 4.16.0, lodash 4.17.15, axios 0.21.1) for SCA demo. CWE-79, CWE-327, CWE-798, CWE-330 in legacy/tracking.js.
14 lines
364 B
Docker
14 lines
364 B
Docker
# Build stage: standard node image (root, npm can write). Runtime: Chainguard zero-CVE base.
|
|
FROM public.ecr.aws/docker/library/node:20-alpine AS build
|
|
WORKDIR /app
|
|
COPY package*.json ./
|
|
RUN npm install --omit=dev
|
|
COPY src/ ./src/
|
|
COPY legacy/ ./legacy/
|
|
|
|
FROM cgr.dev/chainguard/node:latest
|
|
WORKDIR /app
|
|
COPY --from=build /app ./
|
|
EXPOSE 3000
|
|
CMD ["src/server.js"]
|