Dockerfile modified and workflow created

Author: JohanVerne

.github/workflows/github-actions-demo.yml

@@ -0,0 +1,18 @@
+name: GitHub Actions Demo
+run-name: ${{ github.actor }} is testing out GitHub Actions 🚀
+on: [push]
+jobs:
+  Explore-GitHub-Actions:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
+      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!"
+      - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."
+      - name: Check out repository code
+        uses: actions/checkout@v5
+      - run: echo "💡 The ${{ github.repository }} repository has been cloned to the runner."
+      - run: echo "🖥️ The workflow is now ready to test your code on the runner."
+      - name: List files in the repository
+        run: |
+          ls ${{ github.workspace }}
+      - run: echo "🍏 This job's status is ${{ job.status }}."

Dockerfile

@@ -27,8 +27,31 @@ USER node
 ###RUN ###
 FROM alpine:3.20 AS runner
 
+# Chemin de travail
+WORKDIR /app
+
+# Installation de Node.js runtime
+RUN apk add --no-cache nodejs
+
+# Création de l'utilisateur et groupe node
+RUN addgroup -S node && adduser -S node -G node
+
+
+# Copie uniquement des fichiers nécessaires depuis builder
+COPY --from=builder --chown=node:node /app/dist ./dist
+COPY --from=builder --chown=node:node /app/package*.json ./
+
+# Installation des dépendances de production uniquement
+RUN apk add --no-cache npm && \
+    npm ci --only=production && \
+    npm cache clean --force && \
+    apk del npm && \
+    rm -rf /tmp/*
+
+# Downgrade des privilèges
+USER node
+
 # exposition du port
 EXPOSE 8000
 # exécution
-CMD ["node", "dist/index.js"]
-COPY --from=builder --chown=node:node /app ./app
+CMD ["node", "dist/index.js"]