services:
  security-lint:
    build:
      context: .
      dockerfile: Dockerfile
    image: php-security-linter:latest
    volumes:
      # Mount the target directory as read-only
      - ${TARGET_PATH:-.}:/target:ro
    # Default command can be overridden
    # Example: docker compose run --rm security-lint /target/app -s high