← 输入框|github.com|刷新
Skip to content

Amass Docker Container does not use a non-numeric user #715

New issue
New issue
Closed
Closed
Amass Docker Container does not use a non-numeric user#715
Assignees
Ilyesbdlala
Labels
maintenancescannerImplement or update a security scanner

Description

@SebieF
SebieF
opened on Oct 8, 2021

Currently, we use the amass docker container published on dockerhub. Now we added securityContext values to every scanner. During this process, I encountered that it is necessary to set the value runAsNonRoot to false because they use a non-numeric user in their Dockerfile.

Otherwise, the following error is raised by kubernetes: Error: container has runAsNonRoot and image has non-numeric user (user), cannot verify user is non-root (pod: "scan-amass-scanner-dummy-scan, container: amass).

Possible solutions

  1. Create an issue in the OWASP amass project and ask them if it is possible to add a numerical user value (1001 is standard for SCB scanners)
  2. Create our own dockerfile for the amass scanner.

Activity

  1. SebieF
    added
    scannerImplement or update a security scanner
    maintenance
    on Oct 8, 2021
  2. SebieF
    added this to the v3.3.0 milestone on Oct 8, 2021
  3. rfelber
    removed this from the v3.3.0 milestone on Mar 9, 2022
  4. Weltraumschaf
    added this to secureCodeBoxon Jul 20, 2023
  5. github-project-automation
    moved this to Backlog in secureCodeBoxon Jul 20, 2023
  6. Zero3141
    assigned
    Ilyesbdlala
    on Sep 4, 2023

  7. Zero3141 commented on Sep 4, 2023

    @Zero3141
    Zero3141
    on Sep 4, 2023
    Contributor

    Will be fixed in PR1864, because we introduce our own scanner docker container

  8. Zero3141
    moved this from Backlog to In Progress in secureCodeBoxon Sep 4, 2023
  9. Ilyesbdlala
    added a commit that references this issue on Sep 5, 2023

    #715 Set Amass Docker Image in a numeric way to allow runAsNonRoot

    f4ea663
  10. Ilyesbdlala
    added 2 commits that reference this issue on Sep 12, 2023

    #715 Set Amass Docker Image in a numeric way to allow runAsNonRoot

    a16f5ba

    #715 Set Amass Docker Image in a numeric way to allow runAsNonRoot

    772d993

  11. J12934 commented on Sep 26, 2023

    @J12934
    J12934
    on Sep 26, 2023
    Member

    resolved

  12. J12934
    closed this as completedon Sep 26, 2023
  13. github-project-automation
    moved this from In Progress to Done in secureCodeBoxon Sep 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

maintenancescannerImplement or update a security scanner

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions