Skip to content

Conversation

@calebcall
Copy link
Contributor

No description provided.

@github-actions
Copy link
Contributor

🔍 Trivy Dockerfile Scan Results for protocols/sqd/sqd-worker/Dockerfile

Click to view findings

Report Summary

┌────────────┬────────────┬───────────────────┐
│   Target   │    Type    │ Misconfigurations │
├────────────┼────────────┼───────────────────┤
│ Dockerfile │ dockerfile │         1         │
└────────────┴────────────┴───────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


Dockerfile (dockerfile)
=======================
Tests: 21 (SUCCESSES: 20, FAILURES: 1)
Failures: 1 (HIGH: 1, CRITICAL: 0)

AVD-DS-0002 (HIGH): Specify at least 1 USER command in Dockerfile with non-root user as argument
════════════════════════════════════════
Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

See https://avd.aquasec.com/misconfig/ds002
────────────────────────────────────────


Please review these findings and make necessary fixes to improve the security of your Dockerfile.

@bj-workflow-app
Copy link

All test nodes were deployed successfully and cleaned up.

@calebcall calebcall merged commit 0ef9c18 into main Apr 21, 2025
12 checks passed
@calebcall calebcall deleted the feat/sqd-2.3.2 branch April 21, 2025 16:26
@bj-workflow-app
Copy link

Sqd: sqd-worker-mainnet version 1.0.15 and build number 1 has been pushed to the Dev API.

@bj-workflow-app
Copy link

Sqd: sqd-worker-mainnet version 1.0.15 and build number 1 has been pushed to the Staging API.

@bj-workflow-app
Copy link

Sqd: sqd-worker-mainnet version 1.0.15 and build number 1 has been pushed to the Production API.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants