FROM python:3.13-alpine3.22@sha256:7f7ee17311e0273954ffe76a7b84a2d8c8ecf16f9992e780e4d46c86175df431

RUN addgroup -S -g 10001 scoreboard \
    && adduser -S -D -H -u 10001 -G scoreboard scoreboard

WORKDIR /app
COPY --chown=10001:10001 score_api.py question-catalog.json ./

USER 10001:10001
EXPOSE 8080

CMD ["python", "-I", "/app/score_api.py"]
