shivasurya/code-pathfinder
high Container Running as Root - Missing USER
Dockerfile:1
Dockerfile does not specify USER instruction. Container will run as root by default, which increases the attack surface if the container is compromised.
CWE-250 open
Code
Dockerfile1FROM cgr.dev/chainguard/go:latest AS builder
2
3WORKDIR /app
4
Seen on 8 scans
Get this for your repo.
Pathfinder runs the same scan on your own repos free. Connect via GitHub in 30 seconds.