use distroless base image

[matthyx]

this one requires a modification in the Helm chart:

securityContext:
  fsGroup: 65532
  runAsUser: 65532

[codiumai-pr-agent-free]

PR Analysis

• 🎯 Main theme: Change of base image in Dockerfile
• 📌 Type of PR: Enhancement
• 🧪 Relevant tests added: No
• ✨ Focused PR: Yes, because all changes are related to the Dockerfile and the base image used
• 🔒 Security concerns: No, because the changes are related to the Dockerfile and do not introduce any new functionality or dependencies that could lead to security issues

PR Feedback

• General suggestions: The PR is well focused and the changes are clear. However, it would be beneficial to include a brief explanation in the PR description about why the base image is being changed to 'distroless'. This would provide context to reviewers and future developers.

• 🤖 Code feedback:

  • relevant file: build/Dockerfile
    suggestion: Consider using multi-stage builds to reduce the final image size. This can be achieved by separating the building of the application and the creation of the final image into different stages. [important]
    relevant line: FROM --platform=$BUILDPLATFORM golang:1.20-bullseye as builder

  • relevant file: build/Dockerfile
    suggestion: It's a good practice to pin the version of the base image to ensure the build is reproducible. This can prevent unexpected errors due to changes in the base image. [medium]
    relevant line: FROM gcr.io/distroless/static-debian11:nonroot

  • relevant file: build/Dockerfile
    suggestion: The ARG image_version is not used in the Dockerfile. If it's not necessary, consider removing it to clean up the Dockerfile. [medium]
    relevant line: ARG image_version

How to use

To invoke the PR-Agent, add a comment using one of the following commands:
/review [-i]: Request a review of your Pull Request. For an incremental review, which only considers changes since the last review, include the '-i' option.
/describe: Modify the PR title and description based on the contents of the PR.
/improve: Suggest improvements to the code in the PR.
/ask <QUESTION>: Pose a question about the PR.

To edit any configuration parameter from 'configuration.toml', add --config_path=new_value
For example: /review --pr_reviewer.extra_instructions="focus on the file: ..."
To list the possible configuration parameters, use the /config command.

[github-actions]

Summary:

• License scan: success
• Credentials scan: success
• Vulnerabilities scan: success
• Unit test: success
• Go linting: success