dockerfile

Dockerfile

 COPY package*.json ./
 
 
+# 创建一个非 root 用户
+RUN adduser --disabled-password --gecos '' appuser
+
+# 将工作目录的所有权更改为新用户
+RUN chown -R appuser:appuser /app
+
+# 切换到新用户
+USER appuser
+
 # 安装依赖
 RUN npm config set registry https://registry.npmmirror.com
-RUN npm install --unsafe-perm
-#RUN npx vite build
+RUN npm install
 
 # 将项目文件拷贝到工作目录
 COPY . .