diff --git a/Dockerfile b/Dockerfile index 2885929..0ed043f 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,6 @@ #checkov:skip=CKV_DOCKER_2 #checkov:skip=CKV_DOCKER_3 +#trivy:ignore:AVD-DS-0002 FROM python:3.13.7-slim@sha256:58c30f5bfaa718b5803a53393190b9c68bd517c44c6c94c1b6c8c172bcfad040 LABEL org.opencontainers.image.source https://github.com/github/evergreen @@ -9,13 +10,7 @@ COPY requirements.txt *.py /action/workspace/ RUN python3 -m pip install --no-cache-dir -r requirements.txt \ && apt-get -y update \ && apt-get -y install --no-install-recommends git=1:2.47.3-0+deb13u1 \ - && rm -rf /var/lib/apt/lists/* \ - && addgroup --system appuser \ - && adduser --system --ingroup appuser --home /action/workspace --disabled-login appuser \ - && chown -R appuser:appuser /action/workspace - -# Run the action as a non-root user -USER appuser + && rm -rf /var/lib/apt/lists/* # Add a simple healthcheck to satisfy container scanners HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \