Merge pull request #503 from credebl/qa-prod-9-2-2024

merge: QA to Main branch
credebl · Feb 10, 2024 · d62db42 · d62db42
2 parents 62e3e40 + 51cd6e2
commit d62db42
Show file tree

Hide file tree

Showing 187 changed files with 6,741 additions and 2,487 deletions.
diff --git a/Dockerfiles/Dockerfile.agent-provisioning b/Dockerfiles/Dockerfile.agent-provisioning
@@ -1,12 +1,14 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
 # RUN npm install -g pnpm
-# Install AWS CLI
-# RUN apk update
-# RUN apk add openssh-client
-# RUN apk update
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+
+
 # RUN apk add aws-cli
-RUN npm install -g pnpm --ignore-scripts \
+RUN npm install --ignore-scripts -g pnpm \
     && apk update \
     && apk add openssh-client \
     && apk add aws-cli
@@ -18,7 +20,7 @@ WORKDIR /app
 COPY package.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -32,12 +34,12 @@ RUN pnpm run build agent-provisioning
 
 # Stage 2: Create the final image
 FROM node:18-alpine as prod
-# Install AWS CLI
-# RUN apk update
-# RUN apk add openssh-client
-# RUN apk update
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
 # RUN apk add aws-cli
-RUN npm install -g pnpm --ignore-scripts \
+RUN npm install --ignore-scripts -g pnpm  \
     && apk update \
     && apk add openssh-client \
     && apk add aws-cli

diff --git a/Dockerfiles/Dockerfile.agent-service b/Dockerfiles/Dockerfile.agent-service
@@ -1,14 +1,19 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
 # Copy package.json and package-lock.json
 COPY package.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -19,8 +24,12 @@ RUN pnpm run build agent-service
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
-# Set the working directory
+
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 WORKDIR /app
 
 # Copy the compiled code from the build stage

diff --git a/Dockerfiles/Dockerfile.api-gateway b/Dockerfiles/Dockerfile.api-gateway
@@ -1,6 +1,10 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
@@ -9,7 +13,7 @@ COPY package.json ./
 # COPY package-lock.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -20,7 +24,11 @@ RUN pnpm run build api-gateway
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 

diff --git a/Dockerfiles/Dockerfile.connection b/Dockerfiles/Dockerfile.connection
@@ -1,6 +1,10 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
@@ -9,7 +13,7 @@ COPY package.json ./
 #COPY package-lock.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -20,7 +24,11 @@ RUN pnpm run build connection
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 

diff --git a/Dockerfiles/Dockerfile.ecosystem b/Dockerfiles/Dockerfile.ecosystem
@@ -1,6 +1,10 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
@@ -9,7 +13,7 @@ COPY package.json ./
 #COPY package-lock.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -20,7 +24,11 @@ RUN pnpm run build ecosystem
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 

diff --git a/Dockerfiles/Dockerfile.issuance b/Dockerfiles/Dockerfile.issuance
@@ -1,6 +1,10 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
@@ -9,7 +13,7 @@ COPY package.json ./
 #COPY package-lock.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -20,7 +24,11 @@ RUN pnpm run build issuance
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 

diff --git a/Dockerfiles/Dockerfile.ledger b/Dockerfiles/Dockerfile.ledger
@@ -1,6 +1,10 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
@@ -9,7 +13,7 @@ COPY package.json ./
 #COPY package-lock.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -21,7 +25,11 @@ RUN npm run build ledger
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 

diff --git a/Dockerfiles/Dockerfile.organization b/Dockerfiles/Dockerfile.organization
@@ -1,14 +1,18 @@
 # Stage 1: Build the application
 FROM node:18-alpine as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 
 # Copy package.json and package-lock.json
 COPY package.json ./
 
 # Install dependencies
-RUN pnpm i
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -20,7 +24,11 @@ RUN pnpm run build organization
 
 # Stage 2: Create the final image
 FROM node:18-alpine
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 # Set the working directory
 WORKDIR /app
 

diff --git a/Dockerfiles/Dockerfile.user b/Dockerfiles/Dockerfile.user
@@ -1,6 +1,10 @@
 # Stage 1: Build the application
 FROM node:18-slim as build
-RUN npm install -g pnpm
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+RUN npm install --ignore-scripts -g pnpm
 
 # We don't need the standalone Chromium
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD true
@@ -9,7 +13,7 @@ ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD true
 # Note: this installs the necessary libs to make the browser work with Puppeteer.
 RUN apt-get update && apt-get install gnupg wget -y && \
     wget --quiet --output-document=- https://dl-ssl.google.com/linux/linux_signing_key.pub | gpg --dearmor > /etc/apt/trusted.gpg.d/google-archive.gpg && \
-    sh -c 'echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list' && \
+    sh -c 'echo "deb [arch=amd64] https://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list' && \
     apt-get update && \
     apt-get install google-chrome-stable -y --no-install-recommends && \
     rm -rf /var/lib/apt/lists/*
@@ -22,7 +26,7 @@ WORKDIR /app
 COPY package.json ./
 
 # Install dependencies
-RUN pnpm install
+RUN pnpm i --ignore-scripts
 
 # Copy the rest of the application code
 COPY . .
@@ -34,21 +38,27 @@ RUN pnpm run build user
 # Stage 2: Create the final image
 FROM node:18-slim
 
+RUN addgroup -S nonroot \
+    && adduser -S nonroot -G nonroot
+
+USER nonroot
+
+RUN npm install --ignore-scripts -g pnpm
 # We don't need the standalone Chromium
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD true
 
 # Install Google Chrome Stable and fonts
 # Note: this installs the necessary libs to make the browser work with Puppeteer.
 RUN apt-get update && apt-get install gnupg wget -y && \
     wget --quiet --output-document=- https://dl-ssl.google.com/linux/linux_signing_key.pub | gpg --dearmor > /etc/apt/trusted.gpg.d/google-archive.gpg && \
-    sh -c 'echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list' && \
+    sh -c 'echo "deb [arch=amd64] https://dl.google.com/linux/chrome/deb/ stable main" >> /etc/apt/sources.list.d/google.list' && \
     apt-get update && \
     apt-get install google-chrome-stable -y --no-install-recommends && \
     rm -rf /var/lib/apt/lists/*
 
 # Set the working directory
 WORKDIR /app
-RUN npm install -g pnpm
+
 
 # Copy the compiled code from the build stage
 COPY --from=build /app/dist/apps/user/ ./dist/apps/user/