Create complete Apostrophe CMS Docker environment

[killev]

• Create Docker Compose with MongoDB, Redis, and Mongo Express
• Add development environment with hot-reload support
• Implement secure Dockerfile with non-root user
• Configure persistent storage for database and cache
• Add health checks for all services
• Include comprehensive documentation

[github-actions]

🔍 Vulnerabilities of apostrophe-cms:test

📦 Image Reference apostrophe-cms:test

digest	sha256:30ce8f2b2585a9dea7281c4bf96827dfc1323cf17fcca50fce3ddef39bd1f857
vulnerabilities
platform	linux/amd64
size	235 MB
packages	1082

📦 Base Image node:23-alpine

also known as	23-alpine3.21 23.11-alpine 23.11-alpine3.21 23.11.0-alpine 23.11.0-alpine3.21 alpine alpine3.21 current-alpine current-alpine3.21
digest	sha256:0d468be7d2997dd2f6a3cda45e121a6b5140eb7ba3eba299a215030dbb0fb1ca
vulnerabilities

async 1.5.2 (npm) pkg:npm/async@1.5.2 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities Affected range <2.6.4 Fixed version 2.6.4, 3.2.2 CVSS Score 7.8 CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H EPSS Score 0.915% EPSS Percentile 74th percentile Description A vulnerability exists in Async through 3.2.1 (fixed in 3.2.2), which could let a malicious user obtain privileges via the mapValues() method.

async 0.9.2 (npm) pkg:npm/async@0.9.2 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities Affected range <2.6.4 Fixed version 2.6.4, 3.2.2 CVSS Score 7.8 CVSS Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H EPSS Score 0.915% EPSS Percentile 74th percentile Description A vulnerability exists in Async through 3.2.1 (fixed in 3.2.2), which could let a malicious user obtain privileges via the mapValues() method.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[Copilot]

Copilot reviewed 7 out of 10 changed files in this pull request and generated no comments.

Files not reviewed (3)

• Dockerfile: Language not supported
• website/package-lock.json: Language not supported
• website/package.json: Language not supported

Comments suppressed due to low confidence (2)

docker-compose.yml:23

• The Apostrophe service healthcheck uses wget. Ensure that wget is installed in the image or consider an alternative command (e.g., using curl) to avoid potential failures in environments where wget is not available.

      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/"]

docker-compose.yml:40

• The MongoDB healthcheck command may misinterpret the nested quotes. Consider escaping the inner double quotes properly (e.g. using "ping") to ensure the command executes reliably.

      test: echo 'db.runCommand("ping").ok' | mongosh localhost:27017/test --quiet