fix: sonarcloud warnings

asyncapi · Dec 19, 2023 · 91fa27b · 91fa27b
1 parent 36b6e20
commit 91fa27b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,12 +1,19 @@
 FROM node:18-alpine
 
+# Create a non-root user
+RUN addgroup -S myuser && adduser -S myuser -G myuser
+
 RUN apk add --no-cache bash>5.1.16 git>2.42.0
 
 # Installing latest released npm package
 RUN npm install --ignore-scripts -g @asyncapi/cli
 
 COPY entrypoint.sh /entrypoint.sh
 
+# Make the bash file executable
 RUN chmod +x /entrypoint.sh
 
+# Switch to the non-root user
+USER myuser
+
 ENTRYPOINT ["/entrypoint.sh"]