fix(container): tweak container to follow better practices

Author: Delta18-Git

.github/workflows/container.yml

@@ -7,6 +7,9 @@ jobs:
   build:
     name: Build image
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
       - name: Checkout Repository
@@ -20,7 +23,7 @@ jobs:
         uses: redhat-actions/buildah-build@v2
         with:
           image: saturn
-          tags: latest ${{ github.sha }} ${{ github.ref_name }}
+          tags: latest ${{ github.sha }} ${{ github.ref_name.replace('/', '-') }}
           containerfiles: |
             ./Containerfile
 

Containerfile

@@ -2,15 +2,16 @@ FROM docker.io/golang:1.25-alpine3.22 AS buildStage
 
 WORKDIR /app
 
+COPY go.mod ./
+COPY go.sum ./
+RUN go mod download
 COPY types.go ./
 COPY timer.go ./
 COPY main.go ./
-COPY go.mod ./
-COPY go.sum ./
 
-RUN go build -o saturn
+RUN CGO_ENABLED=0 go build -trimpath -ldflags='-s -w' -o saturn
 
-FROM docker.io/alpine:3.20
+FROM docker.io/alpine:3.22
 
 WORKDIR /opt
 COPY --from=buildStage /app/saturn /opt/saturn