Mark/vllm_mm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Security] MEDIUM: 3 Docker configuration issue(s) #31

New issue
Closed
opened 2026-05-17 10:16:29 +00:00 by Mark · 1 comment
Mark commented 2026-05-17 10:16:29 +00:00
Owner
Copy link

Docker Security Issues

  • MEDIUM: Dockerfile does not set a non-root USER — container runs as root
  • MEDIUM: Dockerfile does not set a non-root USER — container runs as root
  • MEDIUM: docker-compose uses host network mode — reduces network isolation

Auto-filed by security-sweep.py on 2026-05-17 03:16 UTC

## Docker Security Issues - **MEDIUM**: Dockerfile does not set a non-root USER — container runs as root - **MEDIUM**: Dockerfile does not set a non-root USER — container runs as root - **MEDIUM**: docker-compose uses host network mode — reduces network isolation --- *Auto-filed by security-sweep.py on 2026-05-17 03:16 UTC*
Mark closed this issue 2026-05-18 19:38:42 +00:00
Mark commented 2026-05-18 19:38:48 +00:00
Author
Owner
Copy link

Quickfix applied via opencode.

Quickfix applied via opencode.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
No results found.
Labels
Clear labels   
blocked:lint-failed

   
blocked:needs-decision

   
blocked:no-changes

   
blocked:no-procedure

   
blocked:preflight

Blocked by the kilo-gsd preflight gate (lint dirty, missing tooling, etc.). Picker skips until the cause is cleared.

  
blocked:verify-failed

   
bug

   
feature-request

   
in-progress

Issue is currently being worked on by a quickfix runner

  
lint-cleanup

Repo-wide ruff lint cleanup required before kilo-gsd can dispatch feature work on this repo.

  
ops-task

Operations task — install, configure, deploy, API calls

  
quickfix

Pipe to opencode for direct fix

  
security/high

High severity security issue

  
security/medium

Medium severity security issue

  
test-coverage

Test coverage review / gap report

  
triage-approved
No labels
blocked:lint-failed
blocked:needs-decision
blocked:no-changes
blocked:no-procedure
blocked:preflight
blocked:verify-failed
bug
feature-request
in-progress
lint-cleanup
ops-task
quickfix
security/high
security/medium
test-coverage
triage-approved
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/vllm_mm#31
No description provided.