From a592a91bca6939d7e2a8ba2fee55ec6daa6536a8 Mon Sep 17 00:00:00 2001 From: Kristoff Kiefer <31993948+kristoff-kiefer@users.noreply.github.com> Date: Fri, 17 May 2024 14:26:14 +0200 Subject: [PATCH] Spsh 519 (#368) * Do not automatically mount a service account token. * Use unprivileged user --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index d59154fd0..35bb28a90 100644 --- a/Dockerfile +++ b/Dockerfile @@ -17,7 +17,7 @@ RUN npm run build FROM $BASE_IMAGE_BUILDER as deployment RUN apk --no-cache upgrade - +USER node ENV NODE_ENV=prod WORKDIR /app COPY package*.json ./