chore(deps-dev): bump the auto-tagger-dev group in /auto-tagger with …

…3 updates [#patch] (#91) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Edoardo Rosa <[email protected]>
notdodo · Oct 27, 2024 · f3e366d · f3e366d
1 parent 01e0aec
commit f3e366d
Show file tree

Hide file tree

Showing 3 changed files with 148 additions and 69 deletions.
diff --git a/auto-tagger/Dockerfile b/auto-tagger/Dockerfile
@@ -1,30 +1,35 @@
-FROM python:3-alpine AS builder
+FROM python:3.12-alpine AS builder
 HEALTHCHECK NONE
 
-ENV POETRY_VERSION=1.8.3 \
-    PATH="${PATH}:/app/.local/bin" \
+ENV PATH="${PATH}:/app/.local/bin" \
+    POETRY_VERSION=1.8.4 \
     PYTHONDONTWRITEBYTECODE=1 \
     POETRY_CACHE_DIR=/app/.cache \
     POETRY_NO_INTERACTION=1 \
     POETRY_VIRTUALENVS_IN_PROJECT=1 \
     POETRY_VIRTUALENVS_CREATE=1
 
+# kics-scan ignore-line
+RUN apk add musl-dev libffi-dev gcc --no-cache
 RUN addgroup -g 1000 app && adduser -G app -u 999 -s /sbin/nologin -h /app app -D
-USER app
 WORKDIR /app
 COPY pyproject.toml poetry.lock /app/
-RUN pip install --user --no-cache-dir poetry==${POETRY_VERSION} && poetry install --only main --no-root
+RUN chmod -R a+r /app
+USER app
+RUN pip install poetry==${POETRY_VERSION} --no-cache-dir
+RUN poetry install --only main
 
-FROM python:3-alpine AS runtime
+FROM python:3.12-alpine AS runtime
 HEALTHCHECK NONE
 
 ENV VIRTUAL_ENV=/app/.venv \
     PATH="/app/.venv/bin:${PATH}"
 
 RUN addgroup -g 1000 app && adduser -G app -u 999 -s /sbin/nologin -h /app app -D
-USER app
 WORKDIR /app
 COPY --from=builder ${VIRTUAL_ENV} ${VIRTUAL_ENV}
 COPY *.py /app/
+RUN chmod -R a+r /app
+USER app
 
 CMD ["python", "/app/main.py"]