[CDAPI-55]: Minor sonar fixes

Author: nhsd-jack-wainwright

infrastructure/images/api-gateway-mock/Dockerfile

@@ -7,6 +7,10 @@ FROM $url
 COPY resources/ /resources
 WORKDIR /resources
 
-RUN pip install --no-cache-dir -r requirements.txt
+RUN pip install --no-cache-dir -r requirements.txt \
+    && addgroup -S nonroot \
+    && adduser -S flask -G nonroot
+
+USER flask
 
 ENTRYPOINT ["flask", "--app", "server", "run", "--host=0.0.0.0"]

infrastructure/images/api-gateway-mock/resources/requirements.txt

@@ -1,2 +1,3 @@
 flask==3.1.2
+flask-cors==6.0.2
 requests==2.32.5

infrastructure/images/api-gateway-mock/resources/server.py

@@ -2,6 +2,7 @@
 
 import requests
 from flask import Flask, request
+from flask_cors import CORS
 
 # Very simple logging configuration taken from https://flask.palletsprojects.com/en/stable/logging/
 dictConfig(
@@ -24,6 +25,7 @@
 )
 
 app = Flask(__name__)
+cors = CORS(app, resources={r"/*": {"origins": "http://localhost:5002"}})
 
 
 @app.route("/", methods=["POST", "GET"], defaults={"path_params": None})
@@ -32,6 +34,7 @@ def forward_request(path_params):
     app.logger.info("received request with data: %s", request.get_data(as_text=True))
 
     response = requests.post(
+        # NOSONAR python:S5332 - Only HTTP is supported by local lambda container.
         "http://pathology-api:8080/2015-03-31/functions/function/invocations",
         json={
             "body": request.get_data(as_text=True).replace("\n", "").replace(" ", ""),

sonar-project.properties

@@ -13,6 +13,6 @@ sonar.exclusions=docs/**,pathology-api/test-artefacts/**,pathology-api/coverage-
 sonar.tests=pathology-api
 sonar.test.inclusions=pathology-api/**/test_*.py, pathology-api/tests/**
 
-sonar.coverage.exclusions=**/tests/**,**/features/**,**/test_*.py
+sonar.coverage.exclusions=**/tests/**,**/features/**,**/test_*.py,infrastructure/images/api-gateway-mock/resources/**
 # Set Python version for more precise analysis
 sonar.python.version=3.14