feat: switch to distroless

app/Dockerfile

@@ -1,14 +1,16 @@
-FROM node:16-buster-slim
+FROM node:16 AS build-env
+WORKDIR /app
 
-RUN apt-get update && apt-get upgrade -y && nodejs -v && npm -v
-WORKDIR /usr/src/app
 COPY package.json .
 COPY package-lock.json .
 RUN npm ci
 COPY xs-app.json .
 COPY webapp webapp/
 RUN find app -name '*.cds' | xargs rm -f
 
+FROM gcr.io/distroless/nodejs:16
+COPY --from=build-env /app /app
+WORKDIR /app
 EXPOSE 5000
-USER node
-CMD [ "npm", "start" ]
+ENV NODE_ENV=production
+CMD [ "npm", "start" ]