From b0040f323ffe04583e71076bac74beb31d696c96 Mon Sep 17 00:00:00 2001
From: zhaieryuan <zhaieryuan@enn.cn>
Date: Thu, 2 Apr 2026 12:23:59 +0800
Subject: [PATCH] =?UTF-8?q?feat=20:=20=E6=8F=90=E4=BA=A4=E9=95=9C=E5=83=8F?=
 =?UTF-8?q?=E6=BA=90=E5=9C=B0=E5=9D=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scanner/Dockerfile | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

diff --git a/scanner/Dockerfile b/scanner/Dockerfile
index 15fc49a2..3e0fc3b8 100644
--- a/scanner/Dockerfile
+++ b/scanner/Dockerfile
@@ -16,10 +16,16 @@ WORKDIR /app
 # 1.使用阿里云 Alpine 镜像源加速 apk 下载
 RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories
 
-# 2. 只在包版本变化时重新安装（分层缓存）
-#RUN apk add --no-cache gcc musl-dev libffi-dev wget && \
-#      pip install --no-cache-dir -i https://mirrors.aliyun.com/pypi/simple/ cisco-ai-skill-scanner && \
-#      apk del gcc musl-dev libffi-dev
+# 2. 安装依赖包（使用清华 PyPI 镜像）
+RUN apk add --no-cache gcc musl-dev libffi-dev wget && \
+      pip install --no-cache-dir -i https://pypi.tuna.tsinghua.edu.cn/simple cisco-ai-skill-scanner && \
+      apk del gcc musl-dev libffi-dev
+
+# 创建 app 用户和组
+RUN addgroup -S app && \
+    adduser -S app -G app && \
+    mkdir -p /tmp/skillhub-scans && \
+    chown app:app /tmp/skillhub-scans
 
 USER app