Run dockerfile actions as non-root users

Author: lnhrdt

next-image-tag-number/Dockerfile

@@ -1,4 +1,6 @@
 FROM alpine:latest
 RUN apk add --update --no-cache --no-progress curl jq
+RUN adduser -u 1001 -D action
+USER action
 COPY action.sh /action.sh
 ENTRYPOINT ["/action.sh"]

set-vendir-channels-path-to-imgpkg-bundle/Dockerfile

@@ -6,5 +6,8 @@ RUN apk add --update --no-cache --no-progress bash perl-utils \
     && wget -O- https://carvel.dev/install.sh | bash \
     && apk del bash perl-utils
 
+RUN adduser -u 1001 -D action
+USER action
+
 COPY action.sh /action.sh
 ENTRYPOINT ["/action.sh"]