Skip to main content

Documentation Index

Fetch the complete documentation index at: https://tally.wharflab.com/llms.txt

Use this file to discover all available pages before exploring further.

Last user should not be root.
PropertyValue
SeverityWarning
CategorySecurity
DefaultEnabled

​
Description

Switching to the root USER opens up certain security risks if an attacker gets access to the container. In order to mitigate this, switch back to a non-privileged user after running the commands you need as root.

​
Examples

​
Problematic code

FROM busybox
USER root
RUN ...

​
Correct code

FROM busybox
USER root
RUN ...
USER guest

​
Reference