Dockerfile

### Base ###

FROM ruby:3.2.2-alpine as base

# Install requirements to run the app
RUN apk add --no-cache --update \
                                git \
                                libpq \
                                tzdata

# Bundle config
RUN bundle config set --global no-cache 'true' && \
    bundle config set --global frozen 'true' && \
    bundle config set --global without 'development test' && \
    bundle config set --global jobs `expr $(cat /proc/cpuinfo | grep -c 'cpu cores')` && \
    bundle config set --global retry 3

# Set app workdir
WORKDIR /app


### Build ###

FROM base as builder

# Install requirements to build the app
RUN apk add --no-cache --update \
                                git \
                                build-base \
                                postgresql-dev

# Copy gemfiles into the container
COPY Gemfile Gemfile.lock ./

# Install gems
ARG bundle_gems__contribsys__com
RUN bundle config https://gems.contribsys.com $bundle_gems__contribsys__com \
      && bundle install \
      && bundle config --delete https://gems.contribsys.com/


### App ###

FROM base

RUN apk add --no-cache --update \
                                python3 \
                                py3-pip \
                                curl && \
    curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin && \
    pip install git+https://github.com/travis-ci/detect-secrets.git --break-system-packages

# Copy gems from builder
COPY --from=builder /usr/local/bundle /usr/local/bundle

# Copy app files
COPY . ./

# Set entrypoint
ENTRYPOINT ["./docker-entrypoint.sh"]

CMD ["bundle", "exec", "rails", "server"]