Mark/activity-book-app
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] MEDIUM: 1 Docker configuration issue(s) #19

New issue
Closed
opened 2026-05-16 02:07:11 +00:00 by Mark · 2 comments
Mark commented 2026-05-16 02:07:11 +00:00
Owner
Copy link

Docker Security Issues

  • MEDIUM: Dockerfile does not set a non-root USER — container runs as root

Auto-filed by security-sweep.py on 2026-05-15 19:07 UTC

## Docker Security Issues - **MEDIUM**: Dockerfile does not set a non-root USER — container runs as root --- *Auto-filed by security-sweep.py on 2026-05-15 19:07 UTC*
Mark commented 2026-05-19 08:12:21 +00:00
Author
Owner
Copy link

This issue was already resolved in commit abe9ddfb11 (2026-05-16).

The Dockerfile now:

  • Creates non-root user appuser (uid/gid 1001)
  • Sets ownership with chown -R appuser:appgroup /app
  • Runs as USER appuser before CMD

Closing as resolved.

This issue was already resolved in commit abe9ddfb113b5427703fc272dd04e645c5c5d1b3 (2026-05-16). The Dockerfile now: - Creates non-root user `appuser` (uid/gid 1001) - Sets ownership with `chown -R appuser:appgroup /app` - Runs as `USER appuser` before CMD Closing as resolved.
Mark closed this issue 2026-05-19 08:12:30 +00:00
Mark commented 2026-05-19 08:12:43 +00:00
Author
Owner
Copy link

Quickfix applied via opencode.

Quickfix applied via opencode.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:needs-attention

Session abandoned or stuck — needs human review

  
blocked:needs-decision

   
blocked:needs-human

Requires human intervention to fix

  
blocked:verify-failed

   
bug

Something is broken or incorrect

  
chore

   
critical

   
decompose

Marked for decomposition into sub-issues before implementation

  
feature-request

   
high

   
in-progress

Claimed by an active kilo-gsd pipeline run

  
medium

   
quality

   
quickfix

   
security/medium

Medium severity security issue

  
triage-approved
No labels
blocked:needs-attention
blocked:needs-decision
blocked:needs-human
blocked:verify-failed
bug
chore
critical
decompose
feature-request
high
in-progress
medium
quality
quickfix
security/medium
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/activity-book-app#19
No description provided.