anchor.diff: -FROM ruby:2.5.3-alpine
  +FROM ruby:2.5.5-alpine
   
   ENV DOCKER true
   ENV INSTALL_PATH /app
  
positive.code: USER docker
  EXPOSE 9292
  
  CMD ./scripts/start.sh development
  
negative.code: # precompile assets; use temporary secret token to silence error, real token set at runtime
  USER docker
  COPY --chown=docker:docker . .
  SHELL ["/bin/ash", "-eo", "pipefail", "-c"]
  RUN alias genrand="$(tr -dc 'a-zA-Z0-9' < /dev/urandom | fold -w 32 | head -n 1)" \
    && SECRET_TOKEN=genrand && SECRET_KEY_BASE=genrand \
    RAILS_RELATIVE_URL_ROOT=/search RAILS_ENV=production bin/rails assets:precompile
  
  # run microscanner
  