rootless docker container

Signed-off-by: virgo-o <[email protected]>

Author: virgo-o

Dockerfile

@@ -5,6 +5,9 @@ ARG VERSION
 ARG CDX_PATH=/opt/cyclonedx-py
 ARG CDX_VENV=${CDX_PATH}/venv
 
+RUN addgroup --system --gid 1000 cyclonedx \
+    && adduser --system --shell /bin/bash --uid 1000 --ingroup cyclonedx cyclonedx
+
 RUN mkdir -p "${CDX_PATH}"
 RUN python -m venv --without-pip "${CDX_VENV}"
 ENV VIRTUAL_ENV=${CDX_VENV}
@@ -19,4 +22,5 @@ RUN pip --python "${CDX_VENV}" \
    "cyclonedx-bom==${VERSION}" --find-links "file://${CDX_PATH}/dist"
 RUN rm -rf ${CDX_PATH}/dist
 
+USER cyclonedx
 ENTRYPOINT ["cyclonedx-py"]