RomanNum3ral
/
project-nomad
mirror of https://github.com/Crosstalk-Solutions/project-nomad.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: patch vulnerabilities with CALUS kill-chain context

This commit is contained in:
Yabets Mebratu 2026-05-31 04:40:37 -07:00
parent d5f7c3f615
commit 64d0f44f3c
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
install/sidecar-disk-collector/Dockerfile
View File

@ -1,6 +1,9 @@
FROM alpine:3.20
RUN apk add --no-cache util-linux bash
# Create non-root user for security (CWE-250: Execution with Unnecessary Privileges)
RUN adduser -D -u 1000 nomaduser
COPY collect-disk-info.sh /usr/local/bin/collect-disk-info.sh
RUN chmod +x /usr/local/bin/collect-disk-info.sh && mkdir -p /storage
WORKDIR /storage
USER nomaduser
CMD ["/usr/local/bin/collect-disk-info.sh"]

5
install/sidecar-updater/Dockerfile
View File

@ -3,6 +3,9 @@ FROM alpine:3.20
# Install Docker CLI for compose operations
RUN apk add --no-cache docker-cli docker-cli-compose bash jq
# Create non-root user for security (CWE-250: Execution with Unnecessary Privileges)
RUN adduser -D -u 1000 nomaduser
# Copy the update watcher script
COPY update-watcher.sh /usr/local/bin/update-watcher.sh
RUN chmod +x /usr/local/bin/update-watcher.sh
@ -11,5 +14,5 @@ RUN chmod +x /usr/local/bin/update-watcher.sh
RUN mkdir -p /shared
WORKDIR /shared
USER nomaduser
CMD ["/usr/local/bin/update-watcher.sh"]