security in docker : use an application user instead of root

[tokyowizard]

This issue is an enhancement request. Could the image run as a non-root user?

Currently, the image runs as the root user.

$ docker run --rm -it --entrypoint=/bin/sh vuls/go-exploitdb:0.1.4
/vuls # id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)
/vuls #

If the user is a non-root user, we would be able to follow best practices of running as a non-root user (e.g. [1] [2]) and add proper restrictions in Pod Security Policies.

[shino]

This issue was closed because it has been inactive.