Dockerfile.github-app

FROM node:24-alpine@sha256:8e2c930fda481a6ec141fe5a88e8c249c69f8102fe98af505f38c081649ea749 # 24-alpine as of 2026-05-01

WORKDIR /app

# Install pnpm
RUN corepack enable && corepack prepare pnpm@10.33.0 --activate

# Copy workspace manifests for dependency installation
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
COPY packages/github-app/package.json ./packages/github-app/
COPY packages/core/package.json ./packages/core/

# Install production dependencies only
RUN pnpm install --frozen-lockfile --prod

# Copy source and build artifacts
COPY packages/core/dist ./packages/core/dist
COPY packages/github-app/dist ./packages/github-app/dist

# Non-root user for security
RUN addgroup -S appgroup && adduser -S appuser -G appgroup
USER appuser

EXPOSE 3001

ENV NODE_ENV=production

ENTRYPOINT ["node", "packages/github-app/dist/index.js"]