diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index 688eb45..156cec1 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -44,7 +44,7 @@ jobs: pre-command: | curl -sSfL https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64 -o /usr/local/bin/hadolint && \ chmod +x /usr/local/bin/hadolint - command: hadolint -f sarif Dockerfile > hadolint.sarif + command: hadolint -f sarif --ignore DL3002 Dockerfile > hadolint.sarif artifact-upload-name: hadolint.sarif artifact-upload-path: hadolint.sarif secrets: diff --git a/Dockerfile b/Dockerfile index a4a0f94..6c4c1a5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -20,7 +20,7 @@ RUN go build -o bin/software FROM cgr.dev/chainguard/static@sha256:676e989769aa9a5254fbfe14abb698804674b91c4d574bb33368d87930c5c472 -# USER root +USER root COPY --from=builder /build/bin/software /software