Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Compliance
Dockerfile
>
General
>
Docker Avoid Sys Workdir Mounts
HIGH
Source
Trivy
ID
DS-0030
WORKDIR should not be mounted on system dirs
WORKDIR should not be mounted on system directories to avoid container breakouts
Impact
Links
https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#workdir
Aqua Container Security