Run non-root containers

mazay · Oct 15, 2024 · b1592a0 · b1592a0
1 parent 6f8e5a1
commit b1592a0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -37,6 +37,13 @@ ARG TARGETPLATFORM
 LABEL maintainer="Yevgeniy Valeyev <[email protected]>"
 # hadolint ignore=DL3018
 RUN apk --no-cache add ca-certificates
+# hadolint ignore=DL3059
+RUN adduser \
+    --disabled-password \
+    --no-create-home \
+    -u 8888 \
+    s3sync
+USER s3sync
 WORKDIR /app/
 COPY --from=builder /go/src/github.com/mazay/s3sync-service/s3sync-service .
 CMD ["./s3sync-service"]