From 21d6675f860a718b976ab283a999574f79f8195d Mon Sep 17 00:00:00 2001
From: Jehoszafat Zimnowoda <17126497+j-zimnowoda@users.noreply.github.com>
Date: Fri, 29 May 2026 10:08:56 +0200
Subject: [PATCH 1/5] ci: install dependencies before copying the source code
 to take advantage of Docker layer caching

---
 Dockerfile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 17d96c62a..0d6c6d488 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,10 +8,11 @@ ARG CI=true
 RUN mkdir /app
 WORKDIR /app
 
-COPY . .* ./
-
+# Install dependencies before copying the source code to take advantage of Docker layer caching
+COPY package*.json ./
 RUN npm ci
 
+COPY . .* ./
 RUN npm run build
 RUN npm run lint
 RUN npm run test

From 33d35f9f0f0cf033376155f63b48650ec8aeea1c Mon Sep 17 00:00:00 2001
From: Jehoszafat Zimnowoda <17126497+j-zimnowoda@users.noreply.github.com>
Date: Fri, 29 May 2026 10:25:46 +0200
Subject: [PATCH 2/5] ci: fix

---
 Dockerfile | 2 +-
 README.md  | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 0d6c6d488..bba50458c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,7 +10,7 @@ WORKDIR /app
 
 # Install dependencies before copying the source code to take advantage of Docker layer caching
 COPY package*.json ./
-RUN npm ci
+RUN npm ci --ignore-scripts
 
 COPY . .* ./
 RUN npm run build
diff --git a/README.md b/README.md
index 59c92fbc0..1ae2099c7 100644
--- a/README.md
+++ b/README.md
@@ -71,6 +71,10 @@ npm run build:spec   # Build OpenAPI specification
 | `src/openapi/`       | OpenAPI specifications              |
 | `src/middleware/`    | JWT, session, authz middleware      |
 
+### Operational Docs
+
+- [ConfigMaps and Secrets used by APL API](docs/configmaps-and-secrets.md)
+
 ## Authentication & Authorization
 
 ### Authentication

From 44f042837d4e6e7505547145f456f468f476d10b Mon Sep 17 00:00:00 2001
From: jeho <17126497+j-zimnowoda@users.noreply.github.com>
Date: Fri, 29 May 2026 13:49:18 +0200
Subject: [PATCH 3/5] Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 1ae2099c7..9b4370e24 100644
--- a/README.md
+++ b/README.md
@@ -73,7 +73,7 @@ npm run build:spec   # Build OpenAPI specification
 
 ### Operational Docs
 
-- [ConfigMaps and Secrets used by APL API](docs/configmaps-and-secrets.md)
+- [Docs](docs/)
 
 ## Authentication & Authorization
 

From b70e40d8401ac89dbddfd809c1e767581ee3e039 Mon Sep 17 00:00:00 2001
From: jeho <17126497+j-zimnowoda@users.noreply.github.com>
Date: Fri, 29 May 2026 13:50:01 +0200
Subject: [PATCH 4/5] fix: Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 Dockerfile | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index bba50458c..671922a02 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,9 +8,12 @@ ARG CI=true
 RUN mkdir /app
 WORKDIR /app
 
-# Install dependencies before copying the source code to take advantage of Docker layer caching
+# Install dependencies before copying the full source code to take advantage of Docker layer caching
 COPY package*.json ./
-RUN npm ci --ignore-scripts
+# Needed for postinstall (build:models) during npm ci
+COPY src/build-spec.ts ./src/build-spec.ts
+COPY src/openapi ./src/openapi
+RUN npm ci
 
 COPY . .* ./
 RUN npm run build

From 80dbcb7e7dc693d5440f64f7d1146c65aefa3096 Mon Sep 17 00:00:00 2001
From: Jehoszafat Zimnowoda <17126497+j-zimnowoda@users.noreply.github.com>
Date: Fri, 29 May 2026 13:52:27 +0200
Subject: [PATCH 5/5] feat: do not copy .git

---
 .dockerignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.dockerignore b/.dockerignore
index dbe86c7e1..3a77d8520 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -4,3 +4,4 @@
 .npm
 dist
 node_modules
+.git
\ No newline at end of file