Semgrep complaining about Dockerfile

[davorrunje]

semgrep==1.90.0

happened in the google-sheets repo but we will probably have this in multiple repos

---

Dockerfile

❯❯❱ dockerfile.security.missing-user-entrypoint.missing-user-entrypoint
By not specifying a USER, a program in the container may run as 'root'.
This is a security hazard. If an attacker can control a process running as
root, they may have control over the container. Ensure that the last USER
in a Dockerfile is a USER other than 'root'.
Details: https://sg.run/k281

       ▶▶┆ Autofix ▶ USER non-root ENTRYPOINT []
       31┆ ENTRYPOINT []

❯❯❱ dockerfile.security.missing-user.missing-user
By not specifying a USER, a program in the container may run as 'root'.
This is a security hazard. If an attacker can control a process running as
root, they may have control over the container. Ensure that the last USER
in a Dockerfile is a USER other than 'root'.
Details: https://sg.run/Gbvn

       ▶▶┆ Autofix ▶ USER non-root CMD [ "/usr/bin/bash", "-c", "./run_server.sh" ]
       32┆ CMD [ "/usr/bin/bash", "-c", "./run_server.sh" ]