Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Dockerfile
>
General
>
Avoid Sys Workdir Mounts
HIGH
Source
Trivy
ID
AVD-DS-0030
WORKDIR should not be mounted on system dirs
WORKDIR should not be mounted on system directories to avoid container breakouts
Impact
Links
https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#workdir
Aqua Container Security