DL3004: Do not use sudo
Error Security
Why This Matters
Using sudo in a Dockerfile is almost always unnecessary because the build already runs as root by default. Worse, sudo adds a SUID binary to the image that can be exploited for privilege escalation. If you need to run a command as a different user, use the USER instruction to switch users explicitly.
How to Fix
Remove sudo and run the command directly (builds run as root by default)
Before (incorrect)
RUN sudo apt-get install -y curlAfter (correct)
RUN apt-get install -y curlRule Details
- Rule Code
- DL3004
- Severity
- Error
- Category
- Security