build: remove src code from container image

Signed-off-by: Nicklas Silversved <nicklas.silversved@digg.se>

Author: brorlarsnicklas

.dockerignore

@@ -0,0 +1,13 @@
+# SPDX-FileCopyrightText: 2025 diggsweden/rest-api-profil-lint-processor
+#
+# SPDX-License-Identifier: CC0-1.0
+
+node_modules
+dist
+.git
+.gitignore
+.vscode
+coverage
+*.log
+.env
+.DS_Store

Containerfile

@@ -2,14 +2,32 @@
 #
 # SPDX-License-Identifier: CC0-1.0
 
-FROM node:22.20.0-slim@sha256:d943bf20249f8b92eff6f605362df2ee9cf2d6ce2ea771a8886e126ec8714f08 AS packages
-ENV NODE_ENV=staging
+FROM node:22.20.0-slim@sha256:d943bf20249f8b92eff6f605362df2ee9cf2d6ce2ea771a8886e126ec8714f08 AS build
+WORKDIR /app
+
+COPY package*.json ./
+
+RUN npm ci --no-audit --no-fund --ignore-scripts
+
+COPY . .
 
+RUN npm run build
+
+RUN npm prune --omit=dev
+
+FROM node:22.20.0-slim@sha256:d943bf20249f8b92eff6f605362df2ee9cf2d6ce2ea771a8886e126ec8714f08 AS runtime
+ENV NODE_ENV=production
 WORKDIR /app
 
-COPY --chown=node:node ["./","./"]
+COPY --from=build /app/dist ./dist
+COPY --from=build /app/node_modules ./node_modules
+COPY --from=build /app/package*.json ./
+
+COPY --from=build /app/document ./document
+COPY --from=build /app/README.md ./README.md
+COPY --from=build /app/GUIDELINES.md ./GUIDELINES.md
+
+RUN chown -R node:node /app
+USER node
 
-#RUN npm config set strict-ssl false 
-RUN npm install --omit=dev --verbose
-RUN npm install ts-node typescript --omit=dev  --verbose
-ENTRYPOINT ["npm", "start", "--"]
+ENTRYPOINT ["node", "dist/app.js"]

package-lock.json

@@ -26,7 +26,7 @@
     "test:integration": "node --experimental-vm-modules ./node_modules/.bin/jest --config jest.integration.config.cjs ",
     "prepare": "npm run build",
     "prepack": "npm run build",
-    "start": "node --import=./register.js src/app.ts"
+    "start": "node dist/app.js"
   },
   "directories": {
     "test": "test"
@@ -40,7 +40,9 @@
     "jest": "^30.0.4",
     "standard-version": "^9.5.0",
     "ts-jest": "^29.4.1",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.2",
+    "ts-node": "^10.9.2"
+
   },
   "dependencies": {
     "@stoplight/spectral-core": "^1.19.5",
@@ -54,8 +56,7 @@
     "fast-xml-parser": "^5.0.0",
     "js-yaml": "^4.1.0",
     "path": "^0.12.7",
-    "yargs": "^18.0.0",
-    "ts-node": "^10.9.2"
+    "yargs": "^18.0.0"
   },
   "//": [
     "Override transitive dependency due to vulnerability",