alpine for docker image

[DariuszPorowski]

Do not see any issue for this, but somehow it may be related to #59 :)

• docker: add alpine flavor for CI docker image
  • reduces image from ~37 MB (debian) to ~12 MB on the registry side (compressed)
  • reduces image from ~104 MB (debian) to ~30 MB on the local disk (uncompressed)
• security: run lychee as non-root user for alpine
• docs: add example about running lychee on Windows PowerShell
• docs: add --rm flag to docker run command to remove container after the run (self-cleanup)
• docs: add -w /input flag to docker run command to set working directory to /input
  • better UX when running lychee from docker locally (feeling like cli)
• ci: tag/build/push for alpine

bonus:

• docker related github-actions: bump (because of https://github.com/lycheeverse/lychee/actions/runs/5034258304/jobs/9028968846#step:3:54)
• dependabot: auto-bump gh actions
• GitHub App usage for GITHUB_TOKEN
• minor typos fix

[mre]

Thanks @DariuszPorowski,
that's a great achievement. I personally use the Debian image as a base for custom additions, so I'd prefer if the main image stayed Debian for that reason. However, what do you think about renaming the image, such that we could support both Debian and Alpine? E.g. how about lycheeverse/lychee:0.13-alpine for example? That's also how PHP does it. (Reference)

[DariuszPorowski]

Love the idea, will update PR probably later today or tomorrow :)

[DariuszPorowski]

@mre tried to figure out your current docker tags

current:

latest -> debian
master -> debian
0.13 -> debian
0.13.0 -> debian
sha-1234567 -> debian

proposal for alpine:

latest-alpine -> alpine
master-alpine -> alpine
0.13-alpine -> alpine
0.13.0-alpine -> alpine
sha-1234567-alpine -> alpine

Am I missed something? :)

[mre]

Yes, that's perfect. 👏 Don't think you missed any tag.

[DariuszPorowski]

@mre so, I think the PR is ready :)

[mre]

Awesome. Just fixed a few typos (and added a comment for reference, in case you want to have a look). Other than that looks great! ✨ Merging!

[mre]

Works like a charm. Amazing PR. Thanks a lot. 🎸

[DariuszPorowski]

@mre btw... just saw latest tag is bind to master branch, not sure it's the best approach ;) IMHO latest should point to the latest production release, so currently 0.13.0

[mre]

🤔 you're probably right. Up for another pull request? 😅

[DariuszPorowski]

@mre sure, but not this week, probably closer to end of the following one.

[mre]

Of course, no rush. 👍