chore(docker): update dockerfile to 3.9

.dockerignore

@@ -1,5 +1,6 @@
-*
+**
 .*
+
 !Pipfile*
 !ggshield
 !README.md

Dockerfile

@@ -1,56 +1,36 @@
-FROM python:3.8-buster as build
+FROM python:3.9-slim as build
 
 LABEL maintainer="GitGuardian SRE Team <support@gitguardian.com>"
 
 ENV LC_ALL C.UTF-8
 ENV LANG C.UTF-8
 ENV PIPENV_VENV_IN_PROJECT true
+ENV PYTHONDONTWRITEBYTECODE 1
+ENV PYTHONFAULTHANDLER 1
+ENV PATH /app/.venv/bin:$PATH
 
 WORKDIR /app
 
 # Install your required build dependencies here
-RUN set -e ; \
-    apt-get update ; \
-    apt-get dist-upgrade -y --no-install-recommends ; \
-    apt-get autoremove -y ; \
-    apt-get clean ; \
-    pip3 install pipenv --upgrade ; \
-    rm -rf /var/lib/apt/lists/*
-
-
-# COPY Pipfile Pipfile.lock ./
-# OR (choose depending on whether you need the ./setup.py to get executed or not)
-COPY . ./
-RUN sed -i '/editable/d' Pipfile.lock
-RUN pipenv install --ignore-pipfile
-
-
-FROM python:3.8-slim-buster
-
-LABEL maintainer="GitGuardian SRE Team <support@gitguardian.com>"
-
 RUN set -e ; \
     apt-get update ; \
     apt-get dist-upgrade -y --no-install-recommends ; \
     apt-get install -y --no-install-recommends git ssh ; \
     apt-get autoremove -y ; \
     apt-get clean ; \
+    pip3 install pipenv --upgrade ; \
     rm -rf /var/lib/apt/lists/*
 
+COPY . .
 
-ENV LC_ALL C.UTF-8
-ENV LANG C.UTF-8
-ENV PATH /app/.venv/bin:$PATH
-
-WORKDIR /app
+RUN pipenv install --ignore-pipfile --deploy
 
 RUN set -ex; \
     groupadd -g 1337 app; \
     useradd -u 1337 -g 1337 -b /home -c "GitGuardian App User" -m -s /bin/sh app; \
     mkdir /data; chmod 777 /data
 
-COPY --from=build /app/.venv /app/.venv
-COPY ./ ./
+USER app
 
 WORKDIR /data
 VOLUME [ "/data" ]