From 58e2419db640a4c1322f532f145468000c77bb42 Mon Sep 17 00:00:00 2001 From: silas <95582913+silas-x@users.noreply.github.com> Date: Wed, 26 Oct 2022 20:26:53 +0100 Subject: [PATCH] Run as least privilege user --- keeper/Dockerfile.keeper | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/keeper/Dockerfile.keeper b/keeper/Dockerfile.keeper index 5aee43836..678453100 100644 --- a/keeper/Dockerfile.keeper +++ b/keeper/Dockerfile.keeper @@ -3,5 +3,6 @@ # heroku container:release -a HEROKU_APP_NAME ARG BASE_TAG=latest FROM us-docker.pkg.dev/mango-markets/gcr.io/mango-v4:$BASE_TAG -ENTRYPOINT ["keeper"] +ENTRYPOINT ["keeper"] +USER mangouser CMD ["crank"]