FROM amazoncorretto:25-alpine3.24

LABEL parent-images=alpine324-java25

RUN adduser -u 1010 -D worker

# Run updates
RUN apk --no-cache upgrade

RUN apk add curl

# Remove setuid/setgid bits
RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true

# Run container as the worker user
USER worker