"some dependencies are only needed to build the image" - it's true if you don't write proper Dockerfiles. You're always free to build an app in a separate image, mark it with `AS build-env`, and then copy the result into an image containing an entrypoint with `COPY --from=build-env`, all within the same dockerfile.