Revert root changes

Signed-off-by: John Kjell <john@testifysec.com>
testifysec · Nov 14, 2024 · 862b5c8 · 862b5c8
1 parent 9dd1864
commit 862b5c8
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -44,7 +44,7 @@ jobs:
       pre-command: |
         curl -sSfL https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -o /usr/local/bin/hadolint && \
         chmod +x /usr/local/bin/hadolint
-      command: hadolint -f sarif --ignore DL3002 Dockerfile > hadolint.sarif
+      command: hadolint -f sarif Dockerfile > hadolint.sarif
       artifact-upload-name: hadolint.sarif
       artifact-upload-path: hadolint.sarif
     secrets:
@@ -122,6 +122,9 @@ jobs:
         install: true
         use: true
 
+    - name: Fix Dockerfile
+      run: sed -i 's/# USER root/USER root/g' Dockerfile
+
     - name: Save Key
       env:
         ED_25519_PRIVATE_KEY: ${{ secrets.ED_25519_PRIVATE_KEY }}

diff --git a/Dockerfile b/Dockerfile
@@ -20,7 +20,7 @@ RUN go build -o bin/software
 
 FROM cgr.dev/chainguard/static@sha256:676e989769aa9a5254fbfe14abb698804674b91c4d574bb33368d87930c5c472
 
-USER root
+# USER root
 
 COPY --from=builder /build/bin/software /software