comunica / jQuery-Widget.js

🖼 A jQuery widget to query heterogeneous interfaces using Comunica SPARQL
http://query.linkeddatafragments.org/
MIT License
18 stars 35 forks source link

Run container as Non-root User #129

Closed MPParsley closed 2 years ago

MPParsley commented 2 years ago

By default, Docker runs commands inside the container as root which violates the Principle of Least Privilege (PoLP) when superuser permissions are not strictly required. You want to run the container as an unprivileged user whenever possible. The node images provide the node user for such purpose.

https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#non-root-user

rubensworks commented 2 years ago

Sure! A PR is definitely welcome on this.

Related to https://github.com/comunica/comunica/pull/944