diff --git a/Dockerfile b/Dockerfile index 91e6b87..64524c5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,11 @@ FROM python:3.10 EXPOSE 8501 WORKDIR /app + +# Create a non-root user with dedicated group +RUN addgroup --system appuser && \ + adduser --system --no-create-home --ingroup appuser appuser + # COPY requirements.txt ./requirements.txt # RUN pip3 install -r requirements.txt @@ -13,5 +18,10 @@ RUN pip install poetry==1.5.0 && \ COPY . . +# Change ownership of application files to non-root user +RUN chown -R appuser:appuser /app + +USER appuser + ENTRYPOINT ["streamlit"] CMD ["run", "myapp.py"]