fix(ci): use /dockerhub/ prefix для Nexus proxy путей
This commit is contained in:
@@ -1,12 +1,12 @@
|
||||
# Multi-stage build для ordinis-read-api. См. ordinis-app/Dockerfile для
|
||||
# rationale `COPY . ./` + `.dockerignore` подхода (single-rule, future-proof
|
||||
# на новые Maven modules).
|
||||
FROM repo.nstart.cloud/library/maven:3.9.9-eclipse-temurin-21 AS build
|
||||
FROM repo.nstart.cloud/dockerhub/library/maven:3.9.9-eclipse-temurin-21 AS build
|
||||
WORKDIR /build
|
||||
COPY . ./
|
||||
RUN mvn -B -pl ordinis-read-api -am package -DskipTests
|
||||
|
||||
FROM repo.nstart.cloud/library/eclipse-temurin:21-jre
|
||||
FROM repo.nstart.cloud/dockerhub/library/eclipse-temurin:21-jre
|
||||
# Non-root user — security hardening (CSO report 2026-05-27 finding #1).
|
||||
# См. ordinis-app/Dockerfile для rationale (compromise → root в контейнере
|
||||
# = escalation surface на ноду). UID 10001 outside system+distro reserved.
|
||||
|
||||
Reference in New Issue
Block a user