FROM golang:1.22-alpine AS builder
WORKDIR /app
COPY go.mod ./
RUN go mod download
COPY main.go .
RUN CGO_ENABLED=0 GOOS=linux go build -o webhook-server .

FROM gcr.io/distroless/static:nonroot
COPY --from=builder /app/webhook-server /webhook-server
USER nonroot:nonroot
ENTRYPOINT ["/webhook-server"]
