dapr / dapr/cli

Dapr Redis container and component definitions should have password configured

Open
#791 4 comments 0 reactions 0 assignees View on GitHub
area/cli kind/feature P2 triaged/resolved
Dominant language
Go
Stars
353
Forks
221
Avg merge
3d 8h
Merged PRs (30d)
2

Description

## In what area(s)?

> /area runtime
> /area test-and-release

## What version of Dapr?

> 1.0.1

## Expected Behavior

## Actual Behavior

When I install the dapr and run the runtime for a long time. We got the security scan result for the host machine with related docker image such as redis-server .
![image](https://user-images.githubusercontent.com/5848051/120260896-5c702300-c2c9-11eb-8831-4c9eb5ebccd5.png)

[root@fnwk1 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
738c660bee97 daprio/dapr "./placement" 2 months ago Up 3 days 0.0.0.0:50005->50005/tcp dapr_placement
cc0aa4b3f9b1 openzipkin/zipkin "start-zipkin" 2 months ago Up 3 days (healthy) 9410/tcp, 0.0.0.0:9411->9411/tcp dapr_zipkin
c8f023598e97 redis "docker-entrypoint.s…" 2 months ago Up 3 days 0.0.0.0:6379->6379/tcp dapr_redis

## Steps to Reproduce the Problem

wget -q https://raw.githubusercontent.com/dapr/cli/master/install/install.sh -O - | /bin/bash
dapr init
docker ps
## Release Note

RELEASE NOTE:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.