Skip to content

Commit

Permalink
chore: another try following aquasecurity/trivy#2961 (comment)
Browse files Browse the repository at this point in the history
  • Loading branch information
@rjaegers
rjaegers committed Nov 15, 2023
1 parent 01d7846 commit 5451bea
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .devcontainer/Dockerfile
View file
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
#trivy:ignore:AVD-DS-0002
# See: https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0002/

Check failure

Code scanning / Trivy (MegaLinter REPOSITORY_TRIVY)

Image user should not be 'root' High

Artifact: .devcontainer/Dockerfile
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002

Check notice

Code scanning / Trivy (MegaLinter REPOSITORY_TRIVY)

No HEALTHCHECK defined Low

Artifact: .devcontainer/Dockerfile
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
# We allow root access in our container that we use for development purposes

#trivy:ignore:AVD-DS-0026
# See: https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0026/
# We don't require a HEALTHCHECK for our devcontainer

#trivy:ignore:AVD-DS-0002
FROM ubuntu@sha256:2b7412e6465c3c7fc5bb21d3e6f1917c167358449fecac8176c6e496e5c1f05f

ARG BATS_VERSION=1.10.0
Expand Down

0 comments on commit 5451bea

Please sign in to comment.