[Security] MEDIUM: 1 Docker configuration issue(s) #12

New issue

Closed

opened 2026-05-17 10:15:36 +00:00 by Mark · 1 comment

Mark commented

2026-05-17 10:15:36 +00:00

Owner

Docker Security Issues

MEDIUM: Dockerfile does not set a non-root USER — container runs as root

Auto-filed by security-sweep.py on 2026-05-17 03:15 UTC

## Docker Security Issues - **MEDIUM**: Dockerfile does not set a non-root USER — container runs as root --- *Auto-filed by security-sweep.py on 2026-05-17 03:15 UTC*

Mark added the

security/medium

label

2026-05-17 10:15:36 +00:00

Mark added the

blocked:needs-decision

label

2026-09-14 14:04:42 +00:00

Mark commented

2026-09-14 15:38:53 +00:00

Author

Owner

Resolved by AuWoMe/planish#10 (PR #10, commit 8d8ab8e — fix(security): drop to non-root user in container; ignore build output), merged to main on 2026-08-07 — two months after #12 was auto-filed. The docker_root_user finding targeted the pre-fix Dockerfile; the current Dockerfile already includes RUN chown -R node:node /app and USER node so the runtime container no longer executes as root.

Closing as a duplicate of #10 (which is already closed). No further action required.

Resolved by AuWoMe/planish#10 (PR #10, commit `8d8ab8e` — *fix(security): drop to non-root user in container; ignore build output*), merged to `main` on 2026-08-07 — two months after #12 was auto-filed. The `docker_root_user` finding targeted the pre-fix Dockerfile; the current `Dockerfile` already includes `RUN chown -R node:node /app` and `USER node` so the runtime container no longer executes as root. Closing as a duplicate of #10 (which is already closed). No further action required.

Mark

2026-09-14 15:39:00 +00:00