-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: move Trivy ignore rules into Dockefile #213
Conversation
🦙 MegaLinter status: ❌ ERROR
See detailed report in MegaLinter reports |
@@ -1,3 +1,11 @@ | |||
# See: https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0002/ |
Check failure
Code scanning / Trivy (MegaLinter REPOSITORY_TRIVY)
Image user should not be 'root' High
Type: dockerfile
Vulnerability DS002
Severity: HIGH
Message: Specify at least 1 USER command in Dockerfile with non-root user as argument
Link: DS002
@@ -1,3 +1,11 @@ | |||
# See: https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0002/ |
Check notice
Code scanning / Trivy (MegaLinter REPOSITORY_TRIVY)
No HEALTHCHECK defined Low
Type: dockerfile
Vulnerability DS026
Severity: LOW
Message: Add HEALTHCHECK instruction in your Dockerfile
Link: DS026
This does not work yet as expected. Closing for now. |
Pull Request Report (#213)Static measures
Time related measures
Status check related measures
|
No description provided.