Merge a87292bd6cdfd2a226d5164d2946866160ee0b6d into be97512ec2241f362d7d254eb213053214850655

.pre-commit-config.yaml

@@ -1,7 +1,7 @@
 ---
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: cef0300fd0fc4d2a87a85fa2093c6b283ea36f4b  # frozen: v5.0.0
     hooks:
       - id: check-added-large-files
       - id: check-executables-have-shebangs
@@ -15,18 +15,18 @@ repos:
       - id: trailing-whitespace
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.23.2
+    rev: cb3c2be894b151dff143b1baf6acbd55f2b7faed  # frozen: 0.30.0
     hooks:
       - id: check-github-workflows
 
   - repo: https://github.com/executablebooks/mdformat
-    rev: 0.7.16
+    rev: e20b1ac5acb8aba0b49d3a9109c6e6b58684ee83  # frozen: 0.7.21
     hooks:
       - id: mdformat
         additional_dependencies:
           - mdformat-gfm
 
   - repo: https://github.com/hadolint/hadolint
-    rev: v2.12.1-beta
+    rev: c3dc18df7a501f02a560a2cc7ba3c69a85ca01d3  # frozen: v2.13.1-beta
     hooks:
       - id: hadolint

Dockerfile

@@ -1,5 +1,5 @@
 #hadolint ignore=DL3007
-FROM alpine:latest as builder
+FROM alpine:latest AS builder
 
 LABEL org.opencontainers.image.title="crontab builder" \
       org.opencontainers.image.description="crontab builder" \
@@ -23,7 +23,7 @@ RUN apk update --quiet && \
     upx --brute rq
 
 #hadolint ignore=DL3007
-FROM docker:latest as release
+FROM docker:latest AS release
 
 LABEL org.opencontainers.image.title="crontab" \
       org.opencontainers.image.description="A docker job scheduler (aka crontab for docker)." \
@@ -51,6 +51,8 @@ RUN apk update --quiet && \
     rm -rf /etc/periodic /etc/crontabs/root && \
     adduser -S docker -D
 
+USER docker
+
 COPY --from=builder /usr/bin/rq/rq /usr/local/bin
 COPY entrypoint.sh /