# Pin a reviewed image digest in a production build pipeline.
FROM python:3.13-slim-bookworm
WORKDIR /job
COPY --chown=10001:10001 reconcile.py runner.py /job/
USER 10001:10001
ENTRYPOINT ["python", "-I", "-B", "/job/runner.py"]
