All Challenges
intermediatedevops5 min+20 pts

Dockerfile Security Audit

How many security issues can you spot in this Dockerfile?

Review this Dockerfile and count the number of security issues. Each issue is a separate problem.
challenge
FROM ubuntu:latest
RUN apt-get update && apt-get install -y curl
COPY . /app
RUN chmod 777 /app
ENV DB_PASSWORD=supersecret123
EXPOSE 22
EXPOSE 80
CMD ["bash"]
Count the security issues. Consider: base image pinning, running as root, secrets in env vars, file permissions, exposed ports, and unnecessary packages. Enter just the number.

Challenge of the week?

New challenges added every Monday

Get full labs