Jorropo ee74c3c446 lint: suppress intentional root USER in runtime Dockerfiles (#11166) ...

meshtasticd must run as root to reach GPIO/I2C/SPI hardware, so the final
USER root is deliberate. The existing file-level ignore used the old trivy
code (DS002); rename it to DS-0002 and add checkov/CKV_DOCKER_8 so the
last-USER-root findings are suppressed with an explicit justification.

2026-07-24 08:28:21 +00:00

3.1 KiB

Raw Blame History

View Raw