candle-annotator/openspec
Marko Djordjevic 1438e474e8 security: add non-root appuser to services/ml/Dockerfile
Create system user appuser with useradd, set ownership of /app,
and switch to non-root user before CMD to reduce container attack surface.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-18 11:34:26 +01:00
..
changes security: add non-root appuser to services/ml/Dockerfile 2026-02-18 11:34:26 +01:00
specs sync: ml-ui-connection delta specs to main specs 2026-02-18 10:21:05 +01:00
config.yaml starting planning 2026-02-12 09:42:55 +01:00