Multi-stage build

Alpine base image

npm ci usage

Production-only deps

Non-root user

Non-root uid/gid

HEALTHCHECK instruction

Health check timing

.dockerignore present

dockerignore excludes secrets

dockerignore excludes build artifacts

Health endpoint in app

actions/checkout version

actions/setup-node version

npm cache enabled

NODE_VERSION env var

Trigger branches

Deploy only on main

GHCR registry

docker/setup-buildx-action version

docker/login-action version

docker/metadata-action version

docker/build-push-action version

SHA-based image tag

Semver image tag

GHA Docker layer cache

Tests before build

Replica count

RollingUpdate strategy

maxSurge and maxUnavailable

Memory requests/limits

CPU requests/limits

Liveness probe path

Liveness probe timing

Readiness probe path

Readiness probe timing

HPA min/max replicas

HPA CPU target

HPA memory target

Production namespace

NODE_ENV production

LoadBalancer service

Versioned image tag