We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents db105d6 + 55b5604 commit 315a644Copy full SHA for 315a644
Dockerfile
@@ -22,13 +22,17 @@ COPY cogs/ /app/cogs/
22
23
FROM python:3.13-slim-trixie
24
25
+RUN groupadd --system --gid 999 nonroot && useradd --system --gid 999 --uid 999 --create-home nonroot
26
+
27
LABEL org.opencontainers.image.source=https://github.com/CSSUoB/TeX-Bot-Py-V2
28
LABEL org.opencontainers.image.licenses=Apache-2.0
29
-COPY --from=builder --chown=app:app /app /app
30
+COPY --from=builder --chown=nonroot:nonroot /app /app
31
32
ENV LANG=C.UTF-8 PATH="/app/.venv/bin:$PATH"
33
34
WORKDIR /app
35
36
+USER nonroot
37
38
ENTRYPOINT ["python", "-m", "main"]
0 commit comments