dockerfile updated to secure

Updated changes in readme file updated file again
jenkins-x · Feb 13, 2023 · e052514 · e052514
1 parent acc3bd0
commit e052514
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -36,6 +36,15 @@ FROM cgr.dev/chainguard/wolfi-base:latest
 COPY --from=build /jx-cdevents-adapter /jx-cdevents-adapter
 	EXPOSE 80
 
+# Add a new user
+RUN adduser -D myuser
+
+# Change the ownership of the binary to the new user
+RUN chown myuser:myuser /jx-cdevents-adapter
+
+# Run the binary as the new user
+USER myuser
+
 # required for external tools to detect this as a go binary
 ENV GOTRACEBACK=all
 

diff --git a/go.mod b/go.mod
@@ -7,3 +7,4 @@ require (
 	github.com/sirupsen/logrus v1.9.0 // indirect
 	golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 // indirect
 )
+
diff --git a/go.sum b/go.sum
@@ -10,4 +10,4 @@ github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 h1:0A+M6Uqn+Eje4kHMK80dtF3JCXC4ykBgQG4Fe06QRhQ=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
Original file line number	Diff line number	Diff line change
Expand Up		@@ -7,3 +7,4 @@ require (
		github.com/sirupsen/logrus v1.9.0 // indirect
		golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8 // indirect
		)