Merge pull request #173 from EYBlockchain/manoj/oss-fixes

Manoj/oss fixes

Author: ManojkumarBahuleyan

.github/workflows/release-multiple-contracts.yml

@@ -38,7 +38,7 @@ jobs:
           GPR_TOKEN=${{ secrets.GPR_TOKEN }}
         tags: |
           ghcr.io/eyblockchain/timber-multicontract:latest
-          ghcr.io/eyblockchain/timber-multicontract:v2.0.2
+          ghcr.io/eyblockchain/timber-multicontract:v2.0.3
         # username: ${{ github.actor }}
         # password: ${{ secrets.GITHUB_TOKEN }}
         push: true

merkle-tree/Dockerfile

@@ -1,3 +1,22 @@
+# Build stage
+FROM node:lts-alpine AS builder
+
+COPY ./config/trust/* /usr/local/share/ca-certificates/
+RUN apk update --no-check-certificate && apk add --no-check-certificate ca-certificates
+RUN chmod 644 /usr/local/share/ca-certificates/* && update-ca-certificates
+
+WORKDIR /app
+
+COPY ./package.json ./package-lock.json ./
+RUN npm ci
+COPY ./src ./src
+COPY ./.babelrc ./
+
+# Build/transpile the code
+RUN npx babel src --out-dir dist
+
+
+# Production stage
 FROM node:lts-alpine
 
 ENV USERNAME="app"
@@ -16,16 +35,21 @@ WORKDIR /app
 #RUN npm config set strict-ssl false
 
 COPY ./package.json ./package-lock.json ./
-RUN npm install
-COPY ./src ./src
-COPY ./test ./test
-COPY ./.babelrc ./
+RUN npm ci --omit=dev
+
+# Copy transpiled code
+COPY --from=builder /app/dist ./dist
 COPY ./config/trust /certificates
 
+# Remove npm, npx to remove glob vulnerability
+RUN rm -rf /usr/local/lib/node_modules/npm \
+    && rm -f /usr/local/bin/npm /usr/local/bin/npx \
+    && rm -f /usr/local/bin/yarn /usr/local/bin/yarnpkg
+
 USER $USERNAME:$USERNAME
 
 ENV NODE_EXTRA_CA_CERTS=/usr/local/share/ca-certificates/Zscaler_Root_CA.crt
 
 EXPOSE 80
 
-CMD npm start
+CMD node ./dist/index.js