xeno/Portfolio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: isolate privacy scanning and release signing

Browse Source
This commit is contained in:
LucaP
2026-09-02 10:07:01 +03:00
parent 847e6e4da9
commit 8592581b18
15 changed files with 2128 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
containers/privacy-coordinator/Dockerfile Normal file
View File

@@ -0,0 +1,11 @@
ARG BASE_IMAGE
FROM ${BASE_IMAGE}
LABEL org.opencontainers.image.title="portfolio-privacy-coordinator" \
org.opencontainers.image.description="Trusted closure reconciliation without raw decoder authority"
WORKDIR /opt/app
COPY package.json package-lock.json /opt/app/
RUN npm ci --omit=dev --ignore-scripts
COPY scripts/release/reconcile-scan.mjs /opt/app/scripts/release/reconcile-scan.mjs
COPY src/security /opt/app/src/security
USER 65532:65532
ENTRYPOINT ["node", "/opt/app/scripts/release/reconcile-scan.mjs", "--request", "/input/request.json"]