mirror of
https://github.com/status-im/spiff-arena.git
synced 2025-01-10 02:05:40 +00:00
2382c3f0ab
git-subtree-dir: spiffworkflow-frontend git-subtree-split: 75dbea67346d1b0c161b1d7582eeb5442aec5762
16 lines
516 B
Docker
16 lines
516 B
Docker
### STAGE 1: Build ###
|
|
FROM quay.io/sartography/node:latest
|
|
RUN mkdir /app
|
|
WORKDIR /app
|
|
ADD package.json /app/
|
|
ADD package-lock.json /app/
|
|
COPY . /app/
|
|
|
|
# npm ci because it respects the lock file.
|
|
# --ignore-scripts because authors can do bad things in postinstall scripts.
|
|
# https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html
|
|
# npx can-i-ignore-scripts can check that it's safe to ignore scripts.
|
|
RUN npm ci --ignore-scripts && npm run build
|
|
|
|
ENTRYPOINT ["/app/bin/boot_server_in_docker"]
|