Dockerfile tweaks

[nscuro]

Description

• Uses recommended JSON array notation for CMD directives.
• Suppresses warnings for sun.misc.Unsafe usage (for Lucene) emitted by Java 25.
• Removes undesired || true and || exit 1 occurrences as they don't provide any benefit.
• Specifies --chown for COPY directives to make ownership more explicit.
• Switches from wget to curl for health check as it has the same flags in Alpine and Debian, which wget does not have.

Addressed Issue

N/A

Additional Details

N/A

Checklist

• I have read and understand the contributing guidelines
• This PR fixes a defect, and I have provided tests to verify that the fix is effective
• This PR implements an enhancement, and I have provided tests to verify that it works as intended
• This PR introduces changes to the database model, and I have added corresponding update logic
• This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

[owasp-dt-bot]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Copilot]

Pull request overview

This PR modernizes the Dockerfile configurations for Dependency-Track with several improvements focused on best practices and compatibility.

Key changes:

• Converts CMD and HEALTHCHECK directives to JSON array notation for better signal handling
• Adds --sun-misc-unsafe-memory-access=allow flag to suppress Lucene-related warnings in Java 25
• Replaces wget with curl for health checks to maintain consistent command-line flags across Alpine and Debian base images
• Removes unnecessary || true and || exit 1 error handling from user/group creation commands
• Adds explicit --chown flags to COPY directives for clearer ownership management

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
src/main/docker/Dockerfile	Updates Debian-based Dockerfile with JSON array notation, curl installation, --chown flags, and Java 25 unsafe memory access flag
src/main/docker/Dockerfile.alpine	Updates Alpine-based Dockerfile with JSON array notation, curl installation, --chown flags, and Java 25 unsafe memory access flag
src/main/docker/docker-compose.yml	Comments out healthcheck configuration (now handled by Dockerfile) with Podman Compose compatibility note and updates curl syntax
dev/docker-compose.yml	Changes image tag to snapshot-alpine variant and removes healthcheck override

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codacy-production]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
✅ +0.00% (target: -1.00%)	✅ ∅ (target: 70.00%)

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (7e3c0bd)	24511	19939	81.35%
Head commit (a6f962a)	24511 (+0)	19939 (+0)	81.35% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#5657)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences