From 184774f73eff362944a9fcf9832e862952e26422 Mon Sep 17 00:00:00 2001
From: kira-offgrid <kira@thesecurity.online>
Date: Mon, 1 Sep 2025 02:55:37 +0000
Subject: [PATCH] fix:
 dockerfile.security.missing-user-entrypoint.missing-user-entrypoint-Dockerfile

---
 Dockerfile | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 3a1ce53..81817ce 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -41,5 +41,15 @@ ENV VERSION="11"
 ENV RAM_SIZE="4G"
 ENV CPU_CORES="2"
 ENV DISK_SIZE="64G"
+# Create non-root user for security
+RUN useradd -r -u 1000 -g 0 -s /sbin/nologin appuser
 
+
+# Switch to non-root user
+USER appuser
+
+
+# Run as non-root user for security
+RUN net user winuser /add || echo "User already exists"
+USER winuser
 ENTRYPOINT ["/usr/bin/tini", "-s", "/run/entry.sh"]