Fix linting errors

- Capitalize Docker in README.md
- Add persist-credentials: false to all checkout actions
- Add healthcheck and non-root user to Dockerfile
- Add .biomeignore to exclude vendor directory

Author: jdecool

.biomeignore

@@ -0,0 +1 @@
+vendor/

.github/workflows/ci.yml

@@ -15,6 +15,8 @@ jobs:
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Install PHP
         uses: shivammathur/setup-php@v2
@@ -50,9 +52,12 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: master
+          persist-credentials: false
 
       - name: Checkout Code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Install PHP
         uses: shivammathur/setup-php@v2

Dockerfile

@@ -14,6 +14,15 @@ RUN apt-get update \
     && apt-get install -y --no-install-recommends unzip \
     && rm -rf /var/lib/apt/lists/*
 
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
 
 WORKDIR /app
+
+# Add healthcheck
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD php -v || exit 1
+
+# Run as non-root user
+RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
+USER appuser

README.md

@@ -31,7 +31,7 @@ includes:
 
 ## Install for Local Development
 
-### With docker
+### With Docker
 
 ```bash
 git clone git@github.com:timeweb/phpstan-enum.git
@@ -41,7 +41,7 @@ make install
 make phpunit
 ```
 
-### Without docker (localy installed actual version of php, composer, etc)
+### Without Docker (localy installed actual version of php, composer, etc)
 
 ```bash
 git clone git@github.com:timeweb/phpstan-enum.git