semgrep dockerfile

pankajmouriyakong · Nov 15, 2024 · d6faf20 · d6faf20
1 parent dc72ac5
commit d6faf20
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/security-actions/dockerfiles/semgrep.Dockerfile b/security-actions/dockerfiles/semgrep.Dockerfile
@@ -9,10 +9,13 @@ ARG SEMGREP_USER=semgrep
 RUN addgroup -g 1001 $SEMGREP_USER && \
     adduser -D -u 1001 -G $SEMGREP_USER $SEMGREP_USER
 
-RUN chown $SEMGREP_USER:$SEMGREP_USER /usr/local/bin/semgrep
+# Find the semgrep binary location and change ownership
+RUN SEMGREP_PATH=$(which semgrep) && \
+    if [ -n "$SEMGREP_PATH" ]; then chown $SEMGREP_USER:$SEMGREP_USER $SEMGREP_PATH; fi
+
 # Switch to the non-root user
 USER $SEMGREP_USER
 WORKDIR /home/$SEMGREP_USER
 
 # Set the entrypoint to the semgrep command
-ENTRYPOINT ["semgrep"]
+ENTRYPOINT ["semgrep"]