Dapr Redis container and component definitions should have password configured
- Dominant language
- Go
- Stars
- 353
- Forks
- 221
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 2
Description
## In what area(s)?
> /area runtime
> /area test-and-release
## What version of Dapr?
> 1.0.1
## Expected Behavior
## Actual Behavior
When I install the dapr and run the runtime for a long time. We got the security scan result for the host machine with related docker image such as redis-server .

[root@fnwk1 ~]# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
738c660bee97 daprio/dapr "./placement" 2 months ago Up 3 days 0.0.0.0:50005->50005/tcp dapr_placement
cc0aa4b3f9b1 openzipkin/zipkin "start-zipkin" 2 months ago Up 3 days (healthy) 9410/tcp, 0.0.0.0:9411->9411/tcp dapr_zipkin
c8f023598e97 redis "docker-entrypoint.s…" 2 months ago Up 3 days 0.0.0.0:6379->6379/tcp dapr_redis
## Steps to Reproduce the Problem
wget -q https://raw.githubusercontent.com/dapr/cli/master/install/install.sh -O - | /bin/bash
dapr init
docker ps
## Release Note
RELEASE NOTE:
Contributor guide
Assessment
This issue has not been assessed yet.