Skip to content

fix(security): Containerized Frontend application is running as root #1321

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mpawlow merged 1 commit into from
Apr 6, 2026
+9 −5
Merged

fix(security): Containerized Frontend application is running as root #1321

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 9 additions & 5 deletions Dockerfile.frontend
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,20 +1,24 @@
FROM node:20.20.0-slim

# Set working directory
# Set working directory and ensure it is owned by the non-root node user
WORKDIR /app
RUN chown node:node /app

# Switch to non-root user for all subsequent steps
USER node

# Copy frontend dependencies
COPY frontend/package*.json ./
COPY --chown=node:node frontend/package*.json ./
RUN npm install

# Copy frontend source
COPY frontend/ ./
COPY --chown=node:node frontend/ ./

# Build frontend
RUN npm run build
RUN npm run build

# Expose frontend port
EXPOSE 3000

# Start frontend in foreground
CMD ["npm", "start"]
CMD ["npm", "start"]
Loading