Merge pull request #11248 from swagger-api/non-root-user

set non root user in Dockerfile for swagger-generator module

Author: HugoMario

modules/swagger-generator/Dockerfile

@@ -7,6 +7,7 @@ RUN rm /jetty_home/lib/jetty-runner*
 COPY target/lib/javax.servlet-api* /jetty_home/lib/servlet-api-3.1.jar
 COPY target/lib/start.jar /jetty_home/
 ENV JETTY_HOME /jetty_home
+
 WORKDIR /generator
 COPY docker/jetty_base /generator/
 COPY docker/ROOT.xml /generator/webapps/ROOT.xml
@@ -20,5 +21,11 @@ ENV HTTP_PORT ${HTTP_PORT}
 ARG JAVA_MEM
 ENV JAVA_MEM ${JAVA_MEM}
 WORKDIR $JETTY_BASE
+
+RUN addgroup --gid 2000 codegengroup
+RUN adduser --home "/generator" --ingroup codegengroup --disabled-password --gecos '' --shell "/bin/bash" --uid "1000" codegenuser
+RUN chown -R codegenuser /generator
+
+USER codegenuser
 CMD ["./start"]