Docker-Multi Stage Build

backend/Dockerfile.production

@@ -1,4 +1,4 @@
-FROM python:3.13-slim
+FROM python:3.13-slim AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -23,3 +23,21 @@ COPY settings settings
 COPY static static
 COPY templates templates
 COPY manage.py wsgi.py ./
+
+FROM python:3.13-slim
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+RUN groupadd owasp && \
+    useradd --create-home --home-dir /home/owasp -g owasp owasp && \
+    apt-get update && \
+    apt-get install -y libpq-dev && \
+    apt-get clean -y && rm -rf /var/lib/apt/lists/*
+
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /home/owasp
+
+USER owasp
+
+COPY --from=builder /home/owasp /home/owasp

backend/Dockerfile.staging

@@ -1,4 +1,4 @@
-FROM python:3.13-slim
+FROM python:3.13-slim AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -10,7 +10,6 @@ RUN groupadd owasp && \
     python -m pip install --no-cache-dir poetry
 
 ENV PYTHONUNBUFFERED=1
-
 WORKDIR /home/owasp
 
 USER owasp
@@ -23,3 +22,21 @@ COPY settings settings
 COPY static static
 COPY templates templates
 COPY manage.py wsgi.py ./
+
+FROM python:3.13-slim
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+RUN groupadd owasp && \
+    useradd --create-home --home-dir /home/owasp -g owasp owasp && \
+    apt-get update && \
+    apt-get install -y libpq-dev && \
+    apt-get clean -y && rm -rf /var/lib/apt/lists/*
+
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /home/owasp
+
+USER owasp
+
+COPY --from=builder /home/owasp /home/owasp

backend/Dockerfile.test

@@ -1,4 +1,4 @@
-FROM python:3.13-slim
+FROM python:3.13-slim AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -26,3 +26,24 @@ COPY settings settings
 COPY static static
 COPY templates templates
 COPY tests tests
+
+FROM python:3.13-slim
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+RUN groupadd owasp && \
+    useradd --create-home --home-dir /home/owasp -g owasp owasp && \
+    apt-get update && \
+    apt-get install -y libpq-dev && \
+    apt-get clean -y && rm -rf /var/lib/apt/lists/*
+
+ENV FORCE_COLOR=1
+ENV PYTHONUNBUFFERED=1
+
+WORKDIR /home/owasp
+
+USER owasp
+
+COPY --from=builder /home/owasp /home/owasp
+
+CMD ["/bin/bash", "-c", "VENV_DIR=$(ls -d /home/owasp/.cache/pypoetry/virtualenvs/*) && $VENV_DIR/bin/pytest"]

backend/Makefile

@@ -102,7 +102,7 @@ sync-data: update-data enrich-data index-data
 
 test-backend:
 	@docker build -f backend/Dockerfile.test backend -t nest-test-backend
-	@docker run -e DJANGO_CONFIGURATION=Test nest-test-backend poetry run pytest
+	@docker run -e DJANGO_CONFIGURATION=Test nest-test-backend
 
 update-data: \
 	github-update-owasp-organization \

frontend/Dockerfile.test

@@ -1,15 +1,10 @@
-FROM node:22-slim
+FROM node:22-slim AS builder
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 ENV FORCE_COLOR=1
 
-RUN groupadd owasp && \
-    useradd --create-home --home-dir /home/owasp -g owasp owasp && \
-    apt-get update && apt-get upgrade -y && \
-    apt-get clean -y && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /home/owasp
+WORKDIR /app
 
 COPY package.json package-lock.json ./
 RUN npm install
@@ -21,5 +16,29 @@ COPY jest.config.ts jest.config.ts
 COPY tsconfig.json tsconfig.json
 COPY __tests__ __tests__
 
+FROM node:22-slim
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+ENV FORCE_COLOR=1
+
+RUN groupadd owasp && \
+    useradd --create-home --home-dir /home/owasp -g owasp owasp && \
+    apt-get update && apt-get upgrade -y && \
+    apt-get clean -y && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /home/owasp
+
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package*.json ./
+
+COPY --from=builder /app/src ./src
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/jest.setup.ts ./jest.setup.ts
+COPY --from=builder /app/jest.config.ts ./jest.config.ts
+COPY --from=builder /app/tsconfig.json ./tsconfig.json
+COPY --from=builder /app/__tests__ ./__tests__
 
 USER owasp
+
+CMD ["npm" , "run" , "test"]

frontend/Makefile

@@ -22,4 +22,4 @@ shell-frontend:
 
 test-frontend:
 	@docker build -f frontend/Dockerfile.test frontend -t nest-test-frontend
-	@docker run --env-file frontend/.env.example nest-test-frontend npm run test
+	@docker run --env-file frontend/.env.example nest-test-frontend