Last USER is root misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_DOCKER_8
Category - Subcategory	Compute - Default Credentials Or Auth
Provider	OTHER
Severity	LOW
Framework	DOCKER

Impact

The Docker containers by default run with the root privilege and so does the application that runs inside the container. This is a major concern from the security perspective because hackers can gain root access to the Docker host by hacking the application running inside the container.

How to Fix

Remove USER root or add a non-root user after.

[,Dockerfile]

FROM base

• USER root

---