FROM golang:1.23-bookworm AS builder

WORKDIR /build

COPY go.mod go.sum ./
RUN go mod download

COPY . .

RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w" -o /build/worker ./cmd/worker

FROM gcr.io/distroless/static:nonroot

COPY --from=builder /build/worker /worker

USER nonroot:nonroot

ENTRYPOINT ["/worker"]