add the nobody to scratch (#744)

aquasecurity · May 20, 2021 · 08e744f · 08e744f
1 parent 9f2bc6a
commit 08e744f
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/Dockerfile.scratch b/Dockerfile.scratch
@@ -1,5 +1,8 @@
+FROM alpine as nobody
+
 FROM scratch
-# use a non-privileged user
+# use a non-privileged user but need to add it in
+COPY --from=nobody /etc/group /etc/passwd /etc/
 USER nobody
 # work somewhere where we can write
 COPY tfsec /usr/bin/tfsec