Merge pull request #325 from hmcts/Fix/c100_ithc_vulnerabilities

C100 ITHC Vulnerabilities fix
hmcts · May 22, 2024 · fbc0d07 · fbc0d07
2 parents 99e6099 + adbf05d
commit fbc0d07
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -8,6 +8,8 @@ on:
     branches:
       - master
 
+permissions: read-all
+
 jobs:
   build:
     runs-on: ubuntu-latest

diff --git a/CODEOWNERS b/CODEOWNERS
@@ -0,0 +1,3 @@
+# https://help.github.com/en/articles/about-code-owners
+
+@hmcts/private-law
diff --git a/Dockerfile b/Dockerfile
@@ -3,10 +3,17 @@ FROM hmctspublic.azurecr.io/base/java:17-distroless
 
 ENV APP prl-dgs-api.jar
 
+# Change to non-root privilege
+USER hmcts
+
 COPY lib/AI-Agent.xml /opt/app/
 COPY build/libs/$APP /opt/app/
 COPY lib/applicationinsights.json /opt/app/
 
 EXPOSE 4007
 
 CMD ["prl-dgs-api.jar"]
+
+
+HEALTHCHECK --interval=30s --timeout=15s --start-period=60s --retries=3 \
+    CMD wget -q --spider localhost:4007/health || exit 1
-Original file line number
+Diff line change
@@ Expand Up / @@ -8,6 +8,8 @@ on: @@
         branches:
           - master
+    permissions: read-all
     jobs:
       build:
         runs-on: ubuntu-latest
@@ Expand Down @@
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		# https://help.github.com/en/articles/about-code-owners

		@hmcts/private-law