SonarQube reporting default user of container

Hi,

As a sidestep in our deployment of the docker image, the docker file itself is investigated by Sonarqube. It is reporting the following: "This image runs with 'root' or 'containerAdministrator' as the default user. Make sure it is safe here.".

I see in the latest code that there are two users mentioned in the PowerShell script; one for the pod login and one for the actual process

Because I am not a Docker wizard .... could somebody help me assess this, please? Or even help me in trying to find a possible solution.

Might the following article be of help in this? https://learn.microsoft.com/en-us/virtualization/windowscontainers/manage-containers/container-security#when-to-use-containeradmin-and-containeruser-user-accounts

Regards!


Start by reviewing the Dockerfile and the PowerShell script sections that define the pod login and process users. Reproduce or inspect the SonarQube warning for the Windows container, then determine whether the default user can be changed safely without breaking the container's login or process behavior.

Written by the indexing model from the issue text.