FROM python:3.11-alpine
WORKDIR /app
RUN apk add --update helm && \
    adduser -D -u 1000 appuser

COPY --chown=appuser:appuser . .
RUN pip install --upgrade pip \
    && pip install --root-user-action=ignore --no-cache-dir -r requirements.txt
USER appuser
CMD ["python", "-m", "main"]
