diff --git a/Dockerfile b/Dockerfile index 39885ad..9d8b548 100644 --- a/Dockerfile +++ b/Dockerfile @@ -24,13 +24,16 @@ RUN apk --no-cache upgrade apk-tools # Ensuring that we update/upgrade before installing openssl, to mitigate CVE-2021-3711 and CVE-2021-3712 RUN apk update && apk upgrade && apk --no-cache add openssl -# Add glibc for running oc command +# Add glibc for running oc command RUN wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub RUN apk add gcompat RUN apk add jq ENV PATH=$PATH:/usr/local/mount-from-host/bin +RUN adduser -S -s /bin/sh -G root -u 1001 kube-bench +USER kube-bench + COPY --from=build /go/bin/kube-bench /usr/local/bin/kube-bench COPY entrypoint.sh . COPY cfg/ cfg/