Upgrade to Python 3.14 - #7
Merged
Merged
Orca Security (US) / Orca Security - Infrastructure as Code
succeeded
May 5, 2026 in 16s
Orca Security Scan Summary
| Status | Check | Issues by priority | |
|---|---|---|---|
 Passed |
Infrastructure as Code |  0  1  1  0 |
View in Orca |
🛡️ The following IaC misconfigurations have been detected
| NAME | FILE | ||
|---|---|---|---|
|
Dockerfile Missing USER Instruction | Dockerfile | View in code |
|
HEALTHCHECK Instruction Missing | Dockerfile | View in code |
Annotations
Check warning on line 1 in Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[LOW] HEALTHCHECK Instruction Missing
Details:
Containers without health checks cannot automatically restart upon failure,
reducing service reliability and potentially leaving unresponsive containers
running. Health checks enable orchestration platforms to detect and remediate
failed containers. Configure a HEALTHCHECK instruction to monitor container
health status.
Recommendation:
Dockerfile should contain instruction 'HEALTHCHECK'
Check warning on line 1 in Dockerfile
orca-security-us / Orca Security - Infrastructure as Code
[MEDIUM] Dockerfile Missing USER Instruction
Details:
Container images without a specified user instruction run as root by default,
granting unnecessary elevated privileges that increase the impact of potential
container escape vulnerabilities. Running as root violates the principle of least
privilege and expands the attack surface. Specify a non-root user to minimize
privilege escalation risks.
Recommendation:
The 'Dockerfile' should contain the 'USER' instruction
Loading