redpanda-data / kminion

KMinion is a feature-rich Prometheus exporter for Apache Kafka written in Go. It is lightweight and highly configurable so that it will meet your requirements.
MIT License
610 stars 122 forks source link

Add user to docker image to avoid running as root #202

Closed simon0191 closed 1 year ago

simon0191 commented 1 year ago

Add user to docker image to avoid running as root. The kminion binary is owned by root but is executable by other users.

/ $ ls -ll /etc/ssl/certs/ca-certificates.crt
-rw-r--r--    1 root     root        214222 May  8 13:34 /etc/ssl/certs/ca-certificates.crt
/ $ ls -ll /app/
total 13376
-rwxr-xr-x    1 root     root      13697024 May  8 13:34 kminion
CLAassistant commented 1 year ago

CLA assistant check
All committers have signed the CLA.

CLAassistant commented 1 year ago

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.