docker-dotnet/dockerfiles
Mathias Beaulieu-Duncan 74bb1f6070 Run SDK image as nonroot (UID 65532) for Docker Scout compliance
- apko/sdk.yaml: run-as 65532, create /home/nonroot and /app owned by nonroot
- sdk.Dockerfile: USER 65532, set HOME and DOTNET_CLI_HOME to /home/nonroot
- README/DOCKERHUB: update examples to use COPY --chown=nonroot and /app/publish

dotnet restore writes NuGet cache to $DOTNET_CLI_HOME/.nuget/packages
which is now /home/nonroot/.nuget/packages — no root needed.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-03 15:39:51 -05:00
..
runtime-invariant.Dockerfile Initial commit: multi-version .NET Docker images with apko base 2026-02-03 15:18:15 -05:00
runtime.Dockerfile Initial commit: multi-version .NET Docker images with apko base 2026-02-03 15:18:15 -05:00
sdk.Dockerfile Run SDK image as nonroot (UID 65532) for Docker Scout compliance 2026-02-03 15:39:51 -05:00