From 72b4e969b0a13e0e1615d14bdb456c4410b30b6b Mon Sep 17 00:00:00 2001
From: Yannik Fuhrmeister <yannik.fuhrmeister@iteratec.com>
Date: Tue, 29 Jun 2021 12:38:15 +0200
Subject: [PATCH] Run git-repo-scanner As User

See: <https://github.com/secureCodeBox/secureCodeBox/issues/286>

Signed-off-by: Yannik Fuhrmeister <yannik.fuhrmeister@iteratec.com>
---
 scanners/git-repo-scanner/scanner/Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scanners/git-repo-scanner/scanner/Dockerfile b/scanners/git-repo-scanner/scanner/Dockerfile
index 0dfb999f82..d8ddfe2095 100644
--- a/scanners/git-repo-scanner/scanner/Dockerfile
+++ b/scanners/git-repo-scanner/scanner/Dockerfile
@@ -3,9 +3,9 @@
 # SPDX-License-Identifier: Apache-2.0
 
 FROM docker.io/python:3-alpine
-
 COPY . /scripts/
 RUN pip install -r /scripts/requirements.txt
-CMD ["/bin/sh"]
+RUN adduser -S -H -u 1001 gitreposcanner
+USER gitreposcanner
 WORKDIR /scripts
 ENTRYPOINT ["python", "-m", "git_repo_scanner"]