container image for ASH runs as root inside the container

awslabs / automated-security-helper

https://awslabs.github.io/automated-security-helper/

Apache License 2.0

340 stars 45 forks source link

container image for ASH runs as root inside the container #78

Open climbertjh2 opened 2 months ago

climbertjh2 commented 2 months ago

As a recommended practice, code running in containers should run as non-root (UID 0). This is an added protection in case the container is run in privileged mode.

Please update the Dockerfile to add an adduser to the container build and then USER <uid> in the build of the container.

climbertjh2 commented 2 months ago

working on this one.

climbertjh2 commented 2 months ago

PR #79 is provided to address this item