Ensure no relative workdir path
Using relative WORKDIR
can lead to unreliable behavior, and potentially to leak sensitive files, ensure to use absolute paths for the WORKDIR
.
Risk Level: high
Platform: Docker
Spectral Rule ID: DOCKR060
REMEDIATION
Change WORKDIR
from relative to absolute path.
FROM fedora:36
- WORKDIR ./src
+ WORKDIR /project/src
Read more:
Updated about 1 year ago