ARG BASE_IMAGE
FROM ${BASE_IMAGE}
LABEL org.opencontainers.image.title="portfolio-privacy-matcher" \
      org.opencontainers.image.description="Decoder-free independent privacy evidence matcher"
WORKDIR /opt/matcher
COPY containers/privacy-matcher/matcher.mjs /opt/matcher/matcher.mjs
USER 65532:65532
ENTRYPOINT ["node", "/opt/matcher/matcher.mjs"]