Add directions to run within a Docker container

diff --git a/Dockerfile b/Dockerfile
new file mode 100644 (file)
index 0000000..e9adbc5
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,4 @@
+FROM denoland/deno:alpine-2.1.4
+USER deno
+COPY main.ts .
+CMD ["run", "main.ts"]
\ No newline at end of file

diff --git a/README.md b/README.md
index facd3fa73edda5d4a4f49e958f92c5abb92727b7..cec4ba144eb746100e3c89fe1b62a00a09d15b4a 100644 (file)
--- a/README.md
+++ b/README.md
@@ -103,3 +103,19 @@ deno test --lock
 
 `main.ts` does not have any dependencies, so `deno.lock` has no effect on the
 main CLI.
+
+## Docker container
+
+For additional security, you can run this CLI within a Docker container.
+
+1. Build the Docker image using the provided `Dockerfile`:
+
+```
+docker build -t spt .
+```
+
+2. Create a new container without network access and run the CLI:
+
+```
+docker run -it --rm --network none spt
+```