-
-
Notifications
You must be signed in to change notification settings - Fork 103
Closed
Labels
enhancementNew feature or requestNew feature or request
Description
Related Problem
It is a security best practice to make your service run as non-root inside the container: https://docs.docker.com/build/building/best-practices/#user
Especially when it is executed in a rootful way this increases the security.
Proposed Feature
Adjust the Dockerfile to drop permissions when not necessary (anymore).
Alternatives Considered
No response
Benefits
See https://stackoverflow.com/a/68190847/5008962
Additional Context
No response
CommanderTvis
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request