Fix: Service Configuration Allows Unauthorized Permission Escalation in docker-compose.yaml

[kira-offgrid]

Context and Purpose:

This PR automatically remediates a security vulnerability:

• Description: Service 'langbot' allows for privilege escalation via setuid or setgid binaries. Add 'no-new-privileges:true' in 'security_opt' to prevent this.
• Rule ID: yaml.docker-compose.security.no-new-privileges.no-new-privileges
• Severity: HIGH
• File: docker-compose.yaml
• Lines Affected: 4 - 4

This change is necessary to protect the application from potential security risks associated with this vulnerability.

Solution Implemented:

The automated remediation process has applied the necessary changes to the affected code in docker-compose.yaml to resolve the identified issue.

Please review the changes to ensure they are correct and integrate as expected.

[Copilot]

Pull Request Overview

This PR addresses a security vulnerability by preventing unauthorized privilege escalation in the langbot service. The remediation includes updating the docker-compose configuration by adding the "no-new-privileges:true" option under the service's security settings.

• Fixed security configuration for the langbot service to mitigate privilege escalation risks.