FROM node:24.20.0-bookworm-slim
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --ignore-scripts --registry=https://registry.npmjs.org
COPY src ./src
COPY test ./test
COPY artifacts ./artifacts
RUN mkdir reports && chown -R node:node /app
USER node
CMD ["npm", "test"]
