add nonroot user to build stage (#76)

steadforce · Jan 9, 2025 · 65e7298 · 65e7298
1 parent e67bea6
commit 65e7298
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -29,6 +29,7 @@ RUN python -m venv /venv && \
     ls -lha
 
 FROM base AS test
+USER nonroot
 COPY --from=builder /install /usr/local
 COPY tests/ /tests/
 WORKDIR /tests
@@ -37,4 +38,5 @@ RUN python3 -m unittest discover -v -s .
 # Always use the latest image
 # hadolint ignore=DL3007
 FROM cgr.dev/chainguard/wolfi-base:latest
+USER nonroot
 COPY --from=native-builder /install/harbor.bin /usr/local/harbor