From 95bedcd58182465f29127b9fbd9d8c626fe94aab Mon Sep 17 00:00:00 2001 From: Shayne Parlo Date: Mon, 16 Mar 2026 11:11:49 -0400 Subject: [PATCH] fix: add missing WORKDIR /app in production stage (#57) --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index 1b77cae..8f6fa30 100644 --- a/Dockerfile +++ b/Dockerfile @@ -68,6 +68,8 @@ RUN adduser \ # This avoids expensive recursive chown and excludes build tools from the final image COPY --from=build --chown=appuser:appuser /app /app +WORKDIR /app + # Switch to the non-privileged user for all subsequent operations # This improves security by not running as root USER appuser