FROM golang:1.26.6-alpine@sha256:3889b425f035be855a72fb4755265311293b6d414521f0a519d819df32222d83 AS build
WORKDIR /src
COPY go.mod go.sum go.work go.work.sum ./
COPY cmd ./cmd
COPY internal ./internal
RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /out/pulse-migrate ./cmd/migrate

FROM alpine:3.22@sha256:14358309a308569c32bdc37e2e0e9694be33a9d99e68afb0f5ff33cc1f695dce
RUN addgroup -S -g 65532 pulse && adduser -S -D -H -u 65532 -G pulse pulse && apk add --no-cache ca-certificates
COPY --from=build /out/pulse-migrate /usr/local/bin/pulse-migrate
USER 65532:65532
HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 CMD ["sh", "-c", "test -x /usr/local/bin/pulse-migrate"]
ENTRYPOINT ["/usr/local/bin/pulse-migrate"]