fluxcd / flux2-kustomize-helm-example

A GitOps workflow example for multi-env deployments with Flux, Kustomize and Helm.
https://fluxcd.io
Apache License 2.0
935 stars 992 forks source link

Run validate manifests action as non-root user #35

Closed bsord closed 2 years ago

bsord commented 2 years ago

The validate manifests action docker container currently runs as root which goes against security best practices for containers. User 1001 provides the necessary elevated privileges to run what's needed by github/azure/etc while not running the container directly as root. This PR would resolve Issue 34