lerkolabs/uptop
1
1
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases 2 Wiki Activity

fix(docker): non-root user, supply chain attestations, build cleanup #44

Open
lerko wants to merge 1 commits from fix/docker-compliance into main
pull from: fix/docker-compliance
merge into: lerkolabs:main
Conversation 0 Commits 1 Files Changed 3
+25 -3

1 Commits

Author SHA1 Message Date
lerko 87270490de fix(docker): non-root user, supply chain attestations, build cleanup
CI / test (pull_request) Successful in 2m29s
Details
CI / lint (pull_request) Successful in 46s
Details
CI / vulncheck (pull_request) Successful in 41s
Details 
BREAKING: Container now runs as UID 1000 (uptop) instead of root.
Existing volumes with root-owned files need migration:

  docker run --rm -v <volume>:/data alpine chown -R 1000:1000 /data

- Add uptop user (UID/GID 1000) with entrypoint writability check
- Enable SBOM and provenance attestations for Docker Scout compliance
- Prune dangling images and build cache after release builds
 2026-06-01 11:46:05 -04:00