Add & use nonroot user to fix a security hotspot

IbraheemTuffaha · Jul 13, 2024 · c092f7e · c092f7e
1 parent d42df69
commit c092f7e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -12,4 +12,7 @@ COPY --from=build /tmp/requirements.txt /code/requirements.txt
 RUN pip install --no-cache-dir --upgrade -r /code/requirements.txt
 COPY ./app /code/app
 
+RUN groupadd -r nonroot && useradd -r -g nonroot nonroot
+USER nonroot
+
 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]