Pattern: Use of USER root
as last user
Issue: -
Switching to the root USER
opens up certain security risks if an attacker gets access to the container. In order to mitigate this, switch back to a non privileged user after running the commands you need as root.
Example of incorrect code:
FROM busybox
USER root
RUN ...
Example of correct code:
FROM busybox
USER root
RUN ...
USER guest