feat: not run as root (#21)

Signed-off-by: Martin Buchleitner <[email protected]>
infralovers · Nov 9, 2023 · 8101f97 · 8101f97
1 parent ee7b301
commit 8101f97
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -32,4 +32,8 @@ COPY --from=vault /bin/vault /usr/local/bin/vault
 # hadolint ignore=DL3013
 RUN pip3 install --no-cache-dir azure-cli pre-commit
 
+RUN addgroup -S build && adduser -S build -G build
+
+USER build
+
 ENTRYPOINT ["/bin/bash"]