From 570d8d487c860fb22debf621f4cb6527405077d5 Mon Sep 17 00:00:00 2001 From: Jocelyn Castellano Date: Thu, 19 Oct 2023 10:51:49 -0700 Subject: [PATCH] Use nonroot user to run Valfisk --- Dockerfile | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile b/Dockerfile index e40de86..bf26eb6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,4 +14,6 @@ RUN cargo build --target x86_64-unknown-linux-musl --release --locked FROM gcr.io/distroless/static:latest COPY --from=builder /build/target/x86_64-unknown-linux-musl/release/valfisk /valfisk +USER nonroot + CMD ["/valfisk"]