refactor : 인프라 관련 구조 수정

Author: Jwhyee

.github/workflows/deploy.yml

@@ -97,7 +97,9 @@ jobs:
 
       - name: Deploy to EC2
         run: |
-          ssh -o StrictHostKeyChecking=no ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} "\
+          mkdir -p ~/.ssh
+          ssh-keyscan ${{ secrets.EC2_HOST }} >> ~/.ssh/known_hosts
+          ssh ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} "\
             export WEBHOOK_SECRET='${{ secrets.WEBHOOK_SECRET }}' && \
             export GEMINI_API_KEY='${{ secrets.GEMINI_API_KEY }}' && \
             export API_TOKEN_GITHUB='${{ secrets.API_TOKEN_GITHUB }}' && \

Dockerfile

@@ -1,6 +1,13 @@
 FROM eclipse-temurin:21-jdk
 
+# Create a non-root user and group
+RUN groupadd -r appgroup && useradd -r -g appgroup appuser
+
+WORKDIR /app
+
 ARG JAR_FILE=build/libs/*.jar
-COPY ${JAR_FILE} app.jar
+COPY --chown=appuser:appgroup ${JAR_FILE} app.jar
+
+USER appuser
 
-ENTRYPOINT ["java", "-jar", "/app.jar"]
+ENTRYPOINT ["java", "-jar", "app.jar"]