Yusuf Suleman 0ed8f1f83e fix: deployment hardening — non-root containers and health checks (#10) ...

- Gateway, Trips, Fitness Dockerfiles: run as non-root (appuser)
- Added HEALTHCHECK to gateway, trips, fitness
- Used --chown=appuser on COPY for correct file permissions
- Created data dirs with proper ownership before USER switch
- Trips Dockerfile no longer copies whole context (only server.py)

Partial fix for #10 — Node services (inventory, budget, frontend) not yet hardened.

2026-03-29 09:18:42 -05:00

..

budget

fix: resolve path-to-regexp ReDoS vulnerability in budget service (#8)

2026-03-29 09:14:21 -05:00

fitness

fix: deployment hardening — non-root containers and health checks (#10)

2026-03-29 09:18:42 -05:00

inventory

fix(gateway): enforce API key auth on inventory and budget services (#5)

2026-03-29 09:06:41 -05:00

trips

fix: deployment hardening — non-root containers and health checks (#10)

2026-03-29 09:18:42 -05:00