Why?

  • Improve CI/CD pipeline times
  • Lower infra costs
  • Decrease attack surface

What?

  • Switched from node:latest to node:alpine
  • Used multi-stage builds
  • Added .dockerignore (seriously underrated)

Explore Further

  • Try Google Distroless
  • Compile app into a static binary using pkg
  • Ran docker-slim for an instant 10x drop

References

None