Skip to content

Commit

Permalink
Update Dockerfile
Browse files Browse the repository at this point in the history
Adding group:user to fix (CIS_Docker_v1.2.0 - 4.1) Image should be created with a non-root user
  • Loading branch information
dan-vystrcil authored and mikefarah committed Jun 18, 2021
1 parent 4a08ca6 commit 5df0e49
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -14,12 +14,19 @@ RUN CGO_ENABLED=0 make local build
# CI tools expect an interactive shell inside the container
FROM alpine:3.13.5 as production

RUN mkdir /home/yq/
RUN addgroup -g 1000 yq && \
adduser -u 1000 -G yq -s /bin/bash -h /home/yq -D yq
RUN chown -R yq:yq /home/yq/

COPY --from=builder /go/src/mikefarah/yq/yq /usr/bin/yq
RUN chmod +x /usr/bin/yq

ARG VERSION=none
LABEL version=${VERSION}

USER yq

WORKDIR /workdir

ENTRYPOINT ["/usr/bin/yq"]

0 comments on commit 5df0e49

Please sign in to comment.