Skip to content

Conversation

kira-offgrid
Copy link

Context and Purpose:

This PR automatically remediates a security vulnerability:

  • Description: By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'.
  • Rule ID: dockerfile.security.missing-user-entrypoint.missing-user-entrypoint
  • Severity: MEDIUM
  • File: Dockerfile
  • Lines Affected: 45 - 45

This change is necessary to protect the application from potential security risks associated with this vulnerability.

Solution Implemented:

The automated remediation process has applied the necessary changes to the affected code in Dockerfile to resolve the identified issue.

Please review the changes to ensure they are correct and integrate as expected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants