From c9d5285a49645e73e7b6f56b7a8e2ef3341dc231 Mon Sep 17 00:00:00 2001
From: Yannik Fuhrmeister <yannik.fuhrmeister@iteratec.com>
Date: Tue, 29 Jun 2021 12:23:19 +0200
Subject: [PATCH] Run gitleaks As User In Container

See: <https://github.com/secureCodeBox/secureCodeBox/issues/286>

Signed-off-by: Yannik Fuhrmeister <yannik.fuhrmeister@iteratec.com>
---
 scanners/gitleaks/scanner/Dockerfile | 5 ++++-
 scanners/gitleaks/scanner/wrapper.sh | 1 +
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/scanners/gitleaks/scanner/Dockerfile b/scanners/gitleaks/scanner/Dockerfile
index 4efc1b3741..c5ae1e9c6c 100644
--- a/scanners/gitleaks/scanner/Dockerfile
+++ b/scanners/gitleaks/scanner/Dockerfile
@@ -4,5 +4,8 @@
 
 ARG scannerVersion=latest
 FROM zricethezav/gitleaks:${scannerVersion}
+RUN adduser -S -H -u 1001 gitleaks
 COPY wrapper.sh /wrapper.sh
-ENTRYPOINT [ "sh", "/wrapper.sh" ]
+RUN chmod o+x ./wrapper.sh
+USER gitleaks
+ENTRYPOINT ["./wrapper.sh" ]
diff --git a/scanners/gitleaks/scanner/wrapper.sh b/scanners/gitleaks/scanner/wrapper.sh
index 4e3522bba7..8ec55a0650 100644
--- a/scanners/gitleaks/scanner/wrapper.sh
+++ b/scanners/gitleaks/scanner/wrapper.sh
@@ -1,3 +1,4 @@
+#!/bin/sh
 # SPDX-FileCopyrightText: 2020 iteratec GmbH
 #
 # SPDX-License-Identifier: Apache-2.0