Merge pull request #5 from suzuki-shunsuke/run-as-nonroot

Run Docker container as non root user for security
chaspy · Jan 26, 2021 · 42f5b94 · 42f5b94
2 parents 61a9c50 + 2dda0eb
commit 42f5b94
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -18,4 +18,7 @@ FROM alpine:3.13.0 as runner
 
 COPY --from=builder /go/bin/github-pr-prometheus-exporter /app/github-pr-prometheus-exporter
 
+RUN adduser -D -S -H exporter
+USER exporter
+
 ENTRYPOINT ["/app/github-pr-prometheus-exporter"]