use debian image with rootless user, yarn with --prod option (#519)

Author: andrii-codefresh

workflows/codefresh-csdp/versions/1.1.10/images/image-enricher-git-info/Dockerfile

@@ -1,12 +1,18 @@
-FROM node:18.12.1-alpine
+FROM node:18.12.1-bullseye-slim
+
+RUN adduser --gecos "" --disabled-password --home /home/cfu --shell /bin/bash cfu
 
 WORKDIR /app/
 
 COPY package.json .
 COPY yarn.lock .
 
-RUN yarn
+RUN yarn --prod
+
+COPY --chown=cfu --chmod=775 . .
+
+RUN mkdir /cf-outputs && chmod 775 /cf-outputs && chown cfu /cf-outputs
 
-COPY . .
+USER cfu
 
 CMD [ "node", "/app/src/index.js" ]

workflows/codefresh-csdp/versions/1.1.10/images/image-enricher-jira-info/Dockerfile

@@ -1,12 +1,18 @@
-FROM node:18.12.1-alpine
+FROM node:18.12.1-bullseye-slim
+
+RUN adduser --gecos "" --disabled-password --home /home/cfu --shell /bin/bash cfu
 
 WORKDIR /app/
 
 COPY package.json .
 COPY yarn.lock .
 
-RUN yarn
+RUN yarn --prod
+
+COPY --chown=cfu --chmod=775 . .
+
+RUN mkdir /cf-outputs && chmod 775 /cf-outputs && chown cfu /cf-outputs
 
-COPY . .
+USER cfu
 
 CMD [ "node", "/app/src/index.js" ]

workflows/codefresh-csdp/versions/1.1.10/images/report-image-info/Dockerfile

@@ -1,12 +1,18 @@
-FROM node:18.12.1-alpine
+FROM node:18.12.1-bullseye-slim
+
+RUN adduser --gecos "" --disabled-password --home /home/cfu --shell /bin/bash cfu
 
 WORKDIR /app/
 
 COPY package.json .
 COPY yarn.lock .
 
-RUN yarn
+RUN yarn --prod
+
+COPY --chown=cfu --chmod=775 . .
+
+RUN mkdir /cf-outputs && chmod 775 /cf-outputs && chown cfu /cf-outputs
 
-COPY . .
+USER cfu
 
 CMD [ "node", "/app/src/index.js" ]