fix: close workspace ownership and API escapes
This commit is contained in:
@@ -21,17 +21,20 @@ WORKDIR /src/backend
|
||||
COPY backend/package*.json ./
|
||||
COPY backend/scripts ./scripts
|
||||
COPY backend/native ./native
|
||||
COPY backend/src ./src
|
||||
COPY backend/test ./test
|
||||
RUN npm ci
|
||||
RUN npm run build:native
|
||||
RUN npm run test:native
|
||||
# ---- Stage 2: backend TypeScript -> dist ----
|
||||
FROM node:22-bookworm@sha256:7725a5c2c83eed1d36258c66efae14b1ceccd021db9ed1d9559d3335ed3d68ed AS backend-build
|
||||
WORKDIR /src/backend
|
||||
COPY backend/package*.json ./
|
||||
RUN npm ci --ignore-scripts
|
||||
COPY --from=backend-native-build /src/backend/node_modules ./node_modules
|
||||
COPY backend/src ./src
|
||||
COPY backend/scripts ./scripts
|
||||
COPY backend/tsconfig*.json ./
|
||||
RUN npm run build
|
||||
RUN npm run build:ts
|
||||
RUN npm prune --omit=dev
|
||||
COPY --from=backend-native-build /src/backend/native/workspace-fs-at/build/Release/workspace_fs_at.node ./native/workspace-fs-at/build/Release/workspace_fs_at.node
|
||||
# fs-ext is the pinned runtime flock binding; carry its Node-22 build from the compiler stage.
|
||||
|
||||
Reference in New Issue
Block a user