FROM siteworxpro/golang:1.24.3 AS build

WORKDIR /app

ADD . .

ENV GOPRIVATE=git.siteworxpro.com

RUN go mod download && go build -o aws-iam-anywhere-refresher .

FROM alpine:latest AS runtime

WORKDIR /app

COPY --from=build /app/aws-iam-anywhere-refresher aws-iam-anywhere-refresher

RUN adduser -D -H iam && \
    chown iam:iam /app/aws-iam-anywhere-refresher
USER iam

ENTRYPOINT ["/app/aws-iam-anywhere-refresher"]