chore: Switches to non-root user in container

jmriebold · Aug 29, 2020 · 903853f · 903853f
1 parent 8d86d74
commit 903853f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -10,6 +10,11 @@ RUN go build
 # Application image
 FROM alpine:3.12 as run
 
+RUN addgroup -S sqs-exporter && \
+	adduser -S -G sqs-exporter sqs-exporter --gecos "" --disabled-password --no-create-home
+
+USER sqs-exporter
+
 COPY --from=build /app/sqs-prometheus-exporter .
 
 COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/