FROM 086679231553.dkr.ecr.us-east-1.amazonaws.com/docker-parent-images:debian13-python313 AS base

USER root

RUN apt-get update \
    && apt-get install -y --no-install-recommends build-essential ca-certificates \
    && rm -rf /var/lib/apt/lists/*

USER worker

WORKDIR /var/app

RUN python3 -m venv ./.virtualenv
ENV PATH="/var/app/.virtualenv/bin:${PATH}"

COPY --chown=worker:worker pyproject.toml ./
COPY --chown=worker:worker src/ ./src/

RUN pip install --upgrade pip setuptools wheel \
    && pip install .


FROM base AS deploy

ENV GITHUB_TOKEN="" \
    GITHUB_REPO_OWNER="" \
    GITHUB_REPO="" \
    BASE_PATH="."

ENTRYPOINT ["vuln-scan"]

FROM base AS lint-and-test

RUN pip install .[dev]

COPY --chown=worker:worker tests/ ./tests/

ENTRYPOINT ["bash", "-c", "ruff check . && mypy src && pytest"]