docs: Updated reason for chmod in Dockerfiles

Zipstack · Feb 13, 2025 · 3569bc9 · 3569bc9
1 parent 9aadbd7
commit 3569bc9
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/docker/dockerfiles/platform.Dockerfile b/docker/dockerfiles/platform.Dockerfile
@@ -38,6 +38,8 @@ RUN pdm venv create -w virtualenv --with-pip && \
     opentelemetry-distro opentelemetry-exporter-otlp && \
     opentelemetry-bootstrap -a install
 
+# Read and execute access to non-root user to avoid security hotspot
+# Write access to specific sub-directory need to be explicitly provided if required
 COPY --chmod=755 ${BUILD_CONTEXT_PATH} /app/
 # Copy local dependency packages
 COPY --chown=unstract ${BUILD_PACKAGES_PATH} /unstract

diff --git a/docker/dockerfiles/prompt.Dockerfile b/docker/dockerfiles/prompt.Dockerfile
@@ -39,6 +39,8 @@ RUN pdm venv create -w virtualenv --with-pip && \
     opentelemetry-distro opentelemetry-exporter-otlp && \
     opentelemetry-bootstrap -a install
 
+# Read and execute access to non-root user to avoid security hotspot
+# Write access to specific sub-directory need to be explicitly provided if required
 COPY --chmod=755 ${BUILD_CONTEXT_PATH} /app/
 # Copy local dependencies
 COPY --chown=unstract ${BUILD_PACKAGES_PATH}/core /unstract/core

diff --git a/docker/dockerfiles/x2text.Dockerfile b/docker/dockerfiles/x2text.Dockerfile
@@ -27,6 +27,8 @@ RUN pdm venv create -w virtualenv --with-pip && \
     opentelemetry-distro opentelemetry-exporter-otlp && \
     opentelemetry-bootstrap -a install
 
+# Read and execute access to non-root user to avoid security hotspot
+# Write access to specific sub-directory need to be explicitly provided if required
 COPY --chmod=755 ${BUILD_CONTEXT_PATH} /app/
 
 # Install dependencies