candle-annotator/services
Marko Djordjevic 1438e474e8 security: add non-root appuser to services/ml/Dockerfile
Create system user appuser with useradd, set ownership of /app,
and switch to non-root user before CMD to reduce container attack surface.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-18 11:34:26 +01:00
..
ml security: add non-root appuser to services/ml/Dockerfile 2026-02-18 11:34:26 +01:00