feat(rhcloud-40657): Updates for hermetic build Dockerfile ecosystem cert checks (#253)

Author: chambridge

Dockerfile.hermetic

@@ -52,8 +52,15 @@ LABEL com.redhat.component="landing-page-frontend-hermetic" \
       maintainer="Red Hat Console Team <[email protected]>" \
       summary="Red Hat Console Landing Page Frontend"
 
-# Create hermetic-build directory and copy built files from builder stage
-RUN mkdir -p /hermetic-build
-COPY --from=builder /opt/app-root/src/dist /hermetic-build/dist 
-COPY --from=builder /opt/app-root/src/package.json /hermetic-build/package.json 
-COPY --from=builder /opt/app-root/src/package-lock.json /hermetic-build/package-lock.json 
+# Create licenses directory and copy licenses
+RUN mkdir -p /licenses
+COPY --from=builder /opt/app-root/LICENSE /licenses/
+
+# Create srv directory and copy built files from builder stage
+RUN mkdir -p /srv
+COPY --from=builder /opt/app-root/src/dist /srv/dist 
+COPY --from=builder /opt/app-root/src/package.json /srv/package.json 
+COPY --from=builder /opt/app-root/src/package-lock.json /srv/package-lock.json 
+
+# Set to non-root user
+USER 1001

README-hermetic-build.md

@@ -4,7 +4,7 @@ Based on our experience setting up hermetic builds for the landing-page-frontend
 
 ## **Overview**
 
-A hermetic build ensures your frontend application builds in a completely isolated environment without external network access, using only pre-fetched dependencies. This guide uses a shared Dockerfile provided through the `insights-frontend-builder-common` repository. The resulting container will include the build artifacts, package.json, and package-lock.json files organized under a `/hermetic-build` directory.
+A hermetic build ensures your frontend application builds in a completely isolated environment without external network access, using only pre-fetched dependencies. This guide uses a shared Dockerfile provided through the `insights-frontend-builder-common` repository. The resulting container will include the build artifacts, package.json, and package-lock.json files organized under a `/srv` directory.
 
 ## **Prerequisites**