search

sett-and-hive / sarif-to-comment-action

A GitHub action for @security-alert/sarif-to-comment
MIT License
7 stars 4 forks source link

bug: SonarCloud Security Hot Spot: The node image runs with root as the default user #310

Closed tomwillis608 closed 1 month ago

tomwillis608 commented 1 month ago

Version

main

Current Behavior

The node image runs with root as the default user

Expected Behavior

The node image does not run with root as the default user

Steps to Reproduce

build the Dockerfile

Additional Information

https://sonarcloud.io/organizations/tomwillis608/rules?open=docker%3AS6471&rule_key=docker%3AS6471

tomwillis608 commented 1 month ago

https://github.com/nodejs/docker-node/blob/main/docs/BestPractices.md#non-root-user

tomwillis608 commented 1 month ago

Resolved in #317