Release gohoarder 0.0.4

2026-10-22 06:47:42 +00:00 · 2026-01-03 01:21:18 +00:00
parent 6c53ba9e2b
commit 040186644a
6 changed files with 45 additions and 13 deletions
@@ -37,10 +37,8 @@ spec:
          mkdir -p /var/cache/gohoarder /var/lib/gohoarder/metadata /tmp/gohoarder
          {{- if .Values.security.scanners.trivy.enabled }}
          mkdir -p {{ .Values.security.scanners.trivy.cacheDb }}
-          chown -R 1000:1000 {{ .Values.security.scanners.trivy.cacheDb }}
          {{- end }}
-          chown -R 1000:1000 /var/cache/gohoarder /var/lib/gohoarder /tmp/gohoarder
-          chmod 750 /var/cache/gohoarder /var/lib/gohoarder
+          chmod 750 /var/cache/gohoarder /var/lib/gohoarder 2>/dev/null || true
        volumeMounts:
        - name: storage
          mountPath: /var/cache/gohoarder
@@ -53,7 +51,11 @@ spec:
        - name: tmp
          mountPath: /tmp/gohoarder
        securityContext:
-          runAsUser: 0
+          runAsUser: 1000
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
      containers:
      - name: scanner
        securityContext: