github.com/Z4nzu/hackingtool

os.system() runs a string through the shell — command injection if any part is influenced by input. Use subprocess with an argv list. (Apache-2.0.)

subprocess invoked through the shell (shell=True) or with a command string that is interpolated/concatenated/.split() instead of a fixed argv list — command injection risk. Pass a literal argv list and shell=False. (First-party socbox; Apache-2.0.)

subprocess invoked through the shell (shell=True) or with a command string that is interpolated/concatenated/.split() instead of a fixed argv list — command injection risk. Pass a literal argv list and shell=False. (First-party socbox; Apache-2.0.)

subprocess invoked through the shell (shell=True) or with a command string that is interpolated/concatenated/.split() instead of a fixed argv list — command injection risk. Pass a literal argv list and shell=False. (First-party socbox; Apache-2.0.)

Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.

Ensure that a user for the container has been created on /Dockerfile.

Ensure that HEALTHCHECK instructions have been added to container images on /Dockerfile.

Ensure the base image uses a non latest version tag on /Dockerfile.FROM

Ensure top-level permissions are not set to write-all on on(checks)

When using a 'FROM' statement you should use a specific tag to avoid uncontrolled behavior when the image is updated.

You should add HEALTHCHECK instruction in your docker container images to perform the health check on running containers.