security: harden Dockerfile and add .dockerignore#40

Merged

sylvainkalache merged 3 commits intomainfrom

security/dockerfile-hardening

Feb 19, 2026

Commits on Feb 19, 2026

security: add non-root user to Dockerfile and create .dockerignore
sylvainkalache
committed
security: pin third-party GitHub Actions to commit SHAs
sylvainkalache
committed
fix: grant appuser ownership of /app for swagger.json writes
sylvainkalache
committed