chore: multi-stage build for checkout (#651)

src/checkout/Dockerfile

@@ -1,11 +1,19 @@
+FROM node:20-alpine AS build
+WORKDIR /usr/src/app
+COPY --chown=node:node package*.json ./
+COPY --chown=node:node . .
+RUN npm ci -f
+RUN npm run build
+USER node
+
+
 FROM public.ecr.aws/amazonlinux/amazonlinux:2023
 
 # We tell DNF not to install Recommends and Suggests packages, which are
 # weak dependencies in DNF terminology, thus keeping our installed set of
 # packages as minimal as possible.
 RUN dnf --setopt=install_weak_deps=False install -q -y \
     nodejs20 \
-    npm \
     shadow-utils \
     && \
     dnf clean all
@@ -26,12 +34,7 @@ RUN useradd \
 WORKDIR /app
 USER appuser
 
-COPY --chown=appuser:appuser package.json .
-COPY --chown=appuser:appuser package-lock.json .
-
-RUN npm ci
-
-ADD . /app
-RUN npm run build
+COPY --chown=node:node --from=build /usr/src/app/node_modules ./node_modules
+COPY --chown=node:node --from=build /usr/src/app/dist ./dist
 
-ENTRYPOINT [ "node", "dist/main.js" ]
+ENTRYPOINT [ "node", "dist/main.js" ]