fix: pre-create results directory to unblock non-root container user in security pipeline#32

Merged

Nitr4x merged 7 commits into

mainfrom

copilot/fix-security-pipeline-errors

Apr 11, 2026

Commits on Apr 11, 2026

fix: pre-create results directory with write permission for non-root container user

Copilot
and
Nitr4x
authored
fix: use chmod 1777 (sticky bit) on results directory for better permission hygiene

Copilot
and
Nitr4x
authored
fix: remove non-root USER from Dockerfile and revert CI workaround

Copilot
and
Nitr4x
authored
feat(kics): add --exclude-queries support

Copilot
and
Nitr4x
authored
Whitelisting ROOT user usage in docker image. Not relevant as used as a CLI
nitrax
committed
Excluding Docker from opengrep scan as it's already handled by Kics
nitrax
committed
Disabling threshold as kics exclude query is not supported by the v0.0.1 used for the next release
nitrax
committed