Dockerfile

# Meow Decoder - Docker image (headless demo + tools)
# Pinned to digest for OpenSSF Scorecard Pinned-Dependencies
FROM python:3.11-slim@sha256:db27ce7778e5f581d5d97812ee577a01a9fffbfa612c47fc521fa684e3389c9b

# System deps:
# - libzbar0: required by pyzbar (QR decode)
# - libgl1 / libglib2.0-0: often needed for opencv on slim images
RUN apt-get update && apt-get install -y --no-install-recommends \
    libzbar0 \
    libgl1 \
    libglib2.0-0 \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Install python deps first (better caching)
# Use requirements.lock with hashes for supply chain security (OpenSSF Scorecard)
COPY requirements.lock /app/requirements.lock
RUN pip install --no-cache-dir --require-hashes -r /app/requirements.lock

# Copy the project
COPY . /app

# Default: run the Docker demo (writes outputs to /data)
ENV MEOW_DATA_DIR=/data
VOLUME ["/data"]

CMD ["python", "scripts/docker_demo.py"]