2023-05-03 11:06:20 +02:00
|
|
|
== Why is this an issue?
|
|
|
|
|
|
2022-11-18 14:47:39 +01:00
|
|
|
include::../description.adoc[]
|
|
|
|
|
|
2023-05-03 11:06:20 +02:00
|
|
|
=== Noncompliant code example
|
2022-11-18 14:47:39 +01:00
|
|
|
|
|
|
|
|
[source,docker]
|
|
|
|
|
----
|
|
|
|
|
RUN --mount=type=secret,id=build_secret,mode=0777 ./installer.sh # Noncompliant
|
|
|
|
|
----
|
|
|
|
|
|
2023-05-03 11:06:20 +02:00
|
|
|
=== Compliant solution
|
2022-11-18 14:47:39 +01:00
|
|
|
|
|
|
|
|
[source,docker]
|
|
|
|
|
----
|
|
|
|
|
RUN --mount=type=secret,id=build_secret,uid=1000 ./installer.sh
|
|
|
|
|
----
|
|
|
|
|
|
|
|
|
|
include::../see.adoc[]
|
|
|
|
|
|
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
|
|
|
|
|
|
|
|
'''
|
|
|
|
|
== Implementation Specification
|
|
|
|
|
(visible only on this page)
|
|
|
|
|
|
|
|
|
|
include::../message.adoc[]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
'''
|
|
|
|
|
endif::env-github,rspecator-view[]
|
