A user for the container has not been created misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_DOCKER_3
Category - Subcategory	Compute - Default Credentials Or Auth
Provider	OTHER
Severity	LOW
Framework	DOCKER

Impact

The rule's primary purpose is to verify that a dedicated user has been explicitly created for running the container. This is essential to avoid running the container with root privileges, which could introduce significant security risks in case of a compromise. Running containers as a non-root user reduces the potential impact of a security breach.

How to Fix

[source,go]

FROM base

• RUN useradd -m appuser

• USER appuser

---