# Jenkins compiles on its scratch PVC; image assembly needs no toolchain layers.
FROM gcr.io/distroless/static-debian12:nonroot@sha256:afa5c872c891853ca7fcf1f12c3edb23f7eeef36189728842dd51042ff57f7ab
COPY soteria /soteria
USER 65532:65532
EXPOSE 8080
ENTRYPOINT ["/soteria"]