Harden standalone Dockerfile
Severity: Medium | Area: Containers | Labels: containers, hardening
Files
- docker/standalone/Dockerfile
Acceptance Criteria
- Non-root user; pin base image and dependency; avoid -egit installs for releases; correct ENTRYPOINT.
- Build and test still pass.
Rationale: Align with secure container practices.