11 lines
626 B
Docker
11 lines
626 B
Docker
# Node supports the pinned checkout action; application code remains Rust.
|
|
FROM node:24-bookworm@sha256:934240a162082fd8b8a2f90cd5114446443f1eba1c5378f6687167ca405e6584 AS node-runtime
|
|
FROM rust:1.88.0-bookworm@sha256:af306cfa71d987911a781c37b59d7d67d934f49684058f96cf72079c3626bfe0
|
|
RUN rustup component add rustfmt clippy
|
|
COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
|
|
# A new runner workspace volume inherits this ownership. No setuid step or
|
|
# Docker socket is needed in jobs, even with all capabilities dropped.
|
|
RUN mkdir -p /workspace && chown 65532:65532 /workspace
|
|
USER 65532:65532
|
|
WORKDIR /workspace
|