Skip to content

Add Comprehensive Security Vulnerability Analysis Report #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mattdevdba wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Add Comprehensive Security Vulnerability Analysis Report #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5439092
Add comprehensive security vulnerability analysis report
kiro-agent Dec 3, 2025
8e4b94a
Implement security hardening recommendations in Dockerfile
kiro-agent Dec 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 23 additions & 2 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,31 @@
FROM alpine as builder
# Use specific versioned base image with digest
FROM alpine:3.19.0@sha256:6457d53fb065d6f250e1504b9bc42d5b6c65941d57532c072d929dd0628977d0 as builder

RUN apk add --no-cache postgresql

FROM alpine
# Use specific versioned base image for runtime
FROM alpine:3.19.0@sha256:6457d53fb065d6f250e1504b9bc42d5b6c65941d57532c072d929dd0628977d0

# Add OCI labels for metadata and security
LABEL org.opencontainers.image.title="pgbench" \
org.opencontainers.image.description="PostgreSQL pgbench benchmarking tool" \
org.opencontainers.image.version="1.0.0" \
org.opencontainers.image.source="https://github.com/mattdevdba/docker-pgbench"

# Install runtime dependencies
RUN apk add --no-cache libpq

# Create non-root user
RUN adduser -D -u 1000 pgbench

# Copy binary from builder
COPY --from=builder /usr/bin/pgbench /usr/bin/pgbench

# Switch to non-root user
USER pgbench

# Add health check
HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
CMD pgbench --version || exit 1

CMD ["pgbench"]
Loading