bug: Dockerfiles run as root — add non-root USER directive #51
Labels
No labels
blocked:gate-plan
blocked:needs-decision
blocked:needs-human
blocked:no-changes
bug
feature-request
in-progress
ops-retry
ops-task
quickfix
security/high
security/medium
triage-approved
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
Mark/node_hub#51
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
3 Dockerfiles do not set a non-root USER, causing containers to run as root:
frontend/Dockerfile
launcher/Dockerfile
examples/apps/dockerfile-example
Recommendation: add USER directive after package installation. Use a non-privileged UID like 1000.
Fixed in commit. Closing.