Release v2.0.0: Run ASH as non-root user, add explicit CI stage

[rafaelpereyra]

Issue #, if available:

N/A

Description of changes:

v2.0.0

Breaking Changes

• Building ASH images for use in CI platforms (or other orchestration platforms that may require elevated access within the container) now requires targeting the ci stage of the Dockerfile:

via ash CLI

ash --no-run --build-target ci

via docker or other OCI CLI

docker build --tag automated-security-helper:ci --target ci .

Features

• Run ASH as non-root user to align with security best practices.
• Create a CI version of the docker file that still runs as root to comply with the different requirements from building platforms where UID/GID cannot be modified and there are additional agents installed at runtime that requires elevated privileges.

Fixes

• Offline mode now skips NPM/PNPM/Yarn Audit checks (requires connection to registry to pull package information)
• NPM install during image build now restricts available memory to prevent segmentation fault

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[climbertjh2]

Requesting one minor change.

[rafaelpereyra]

Includes changes from #79

[awsmadi]

looks great!

[climbertjh2]

This looks good to me.

I understand the addition of --target to the command-line options, since it is similar to the docker build command-line option of --target. However, in the context of the ash command-line, I think it might cause some confusion.

Also, in the command-line help, it says image to build - it probably should say image to run/build.

[climbertjh2]

I did a couple smoke tests - this looks OK to me. Approving.