🛡️ Security Scan Report

{
  "SchemaVersion": 2,
  "Trivy": {
    "Version": "0.69.0"
  },
  "ReportID": "019c313e-b2f2-7aa3-8a67-0243b9a4b857",
  "CreatedAt": "2026-02-06T04:38:38.578700945Z",
  "ArtifactID": "sha256:6e7d65e9a18134ec95a3f7866dd2a8adf2f0600879aa44647cbd832c5ae35b14",
  "ArtifactName": "/src",
  "ArtifactType": "repository",
  "Metadata": {
    "RepoURL": "https://github.com/eizen-ai/eizen-producer-consumer.git",
    "Branch": "code-refactor-v1",
    "Commit": "67c54f911c015f8d9342beb7571e407ac4d8bb99",
    "CommitMsg": "Fix: Pydanic class srt to int",
    "Author": "Pattabhi Rama D <pattabhiramad@100-3-21-47.d307dfe2a6d0cff70931929124f0f30c.ip.frontiernet.net>",
    "Committer": "Pattabhi Rama D <pattabhiramad@100-3-21-47.d307dfe2a6d0cff70931929124f0f30c.ip.frontiernet.net>"
  },
  "Results": [
    {
      "Target": "Dockerfile",
      "Class": "config",
      "Type": "dockerfile",
      "MisconfSummary": {
        "Successes": 23,
        "Failures": 1
      },
      "Misconfigurations": [
        {
          "Type": "Dockerfile Security Check",
          "ID": "DS-0002",
          "Title": "Image user should not be 'root'",
          "Description": "Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.",
          "Message": "Specify at least 1 USER command in Dockerfile with non-root user as argument",
          "Namespace": "builtin.dockerfile.DS002",
          "Query": "data.builtin.dockerfile.DS002.deny",
          "Resolution": "Add 'USER <non root user name>' line to the Dockerfile",
          "Severity": "HIGH",
          "PrimaryURL": "https://avd.aquasec.com/misconfig/ds-0002",
          "References": [
            "https://docs.docker.com/develop/develop-images/dockerfile_best-practices/",
            "https://avd.aquasec.com/misconfig/ds-0002"
          ],
          "Status": "FAIL",
          "CauseMetadata": {
            "Provider": "Dockerfile",
            "Service": "general"
          }
        }
      ]
    }
  ]
}