chore(ci): drop root privileges.

zntrio · May 17, 2022 · f0d7335 · f0d7335
1 parent 0503eab
commit f0d7335
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -33,6 +33,9 @@ RUN apk update --no-cache && \
     apk add --no-cache ca-certificates && \
     rm -rf /var/cache/apk/*
 
+RUN addgroup -S harp && adduser -S -G harp harp
+
 COPY --from=downloader /tmp/harp /usr/bin/harp
 
+USER harp
 ENTRYPOINT [ "/usr/bin/harp" ]