updated the docker image to use alpine for improved security.

Author: JoeBeeContrast

.github/workflows/docker-release.yml

@@ -1,10 +1,8 @@
 name: Build and Push Docker Image on Release
 
 on:
-  push:
-    branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
+  release:
+    types: [published]
 
 env:
   DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE: "${{secrets.DIGICERT_PKEY_PASSPHRASE}}"

Dockerfile

@@ -3,9 +3,12 @@ WORKDIR /app
 COPY . .
 RUN mvn clean package -DskipTests
 
-FROM eclipse-temurin:17-jre
+FROM eclipse-temurin:17-jre-alpine
 WORKDIR /app
 
+# Install the 'shadow' package to get groupadd and useradd
+RUN apk add --no-cache shadow
+
 # Create a non-root user to run the application
 RUN groupadd -r appgroup && useradd -r -g appgroup appuser
 

pom.xml

@@ -10,7 +10,7 @@
 	</parent>
 	<groupId>com.contrast.labs.ai.mcp</groupId>
 	<artifactId>mcp-contrast</artifactId>
-	<version>0.0.4-SNAPSHOT</version>
+	<version>0.0.4</version>
 	<name>mcp-contrast</name>
 	<description>MCP Server</description>
 	<url/>