candle-annotator/openspec/changes
Marko Djordjevic 1438e474e8 security: add non-root appuser to services/ml/Dockerfile
Create system user appuser with useradd, set ownership of /app,
and switch to non-root user before CMD to reduce container attack surface.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-18 11:34:26 +01:00
..
archive sync: ml-ui-connection delta specs to main specs 2026-02-18 10:21:05 +01:00
code-review-fix security: add non-root appuser to services/ml/Dockerfile 2026-02-18 11:34:26 +01:00