Merge pull request #522 from codacy/fix/security-issue

update dockerfile to fix codacy issue
codacy · Mar 10, 2025 · 39a01d1 · 39a01d1
2 parents 3f1e41c + 854687b
commit 39a01d1
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,10 @@
-FROM alpine:3.15.4
+FROM alpine:3.21.3
+
 RUN apk add --no-cache --update bash docker openjdk8
+RUN adduser -D analysisCli
+
 WORKDIR /workdir
-COPY --chown=root:root cli/target/universal/stage /workdir
-USER root
+COPY --chown=analysisCli:analysisCli cli/target/universal/stage /workdir
+
+USER analysisCli
 ENTRYPOINT ["/workdir/bin/codacy-analysis-cli"]
-CMD []