fix: adding nonRootUser initialization to dockerfiles (#506)

## Summary by Sourcery

Enhancements:
- Remove `USER root` statements from Dockerfiles of backfill-redis,
rekor-cli, and rekor-server.

---------

Signed-off-by: SequeI <[email protected]>

Author: SequeI

.tekton/backfill-redis-pull-request.yaml

@@ -61,7 +61,7 @@ spec:
     stepSpecs:
     - computeResources:
         limits:
-          memory: 3Gi
+          memory: 5Gi
       name: run-tests
   taskRunTemplate:
     serviceAccountName: build-pipeline-backfill-redis

.tekton/backfill-redis-push.yaml

@@ -59,7 +59,7 @@ spec:
     stepSpecs:
     - computeResources:
         limits:
-          memory: 3Gi
+          memory: 5Gi
       name: run-tests
   taskRunTemplate:
     serviceAccountName: build-pipeline-backfill-redis

.tekton/rekor-cli-pull-request.yaml

@@ -61,7 +61,7 @@ spec:
     stepSpecs:
     - computeResources:
         limits:
-          memory: 3Gi
+          memory: 5Gi
       name: run-tests
   taskRunTemplate:
     serviceAccountName: build-pipeline-rekor-cli

.tekton/rekor-cli-push.yaml

@@ -58,7 +58,7 @@ spec:
     stepSpecs:
     - computeResources:
         limits:
-          memory: 3Gi
+          memory: 5Gi
       name: run-tests
   taskRunTemplate:
     serviceAccountName: build-pipeline-rekor-cli

.tekton/rekor-server-pull-request.yaml

@@ -61,7 +61,7 @@ spec:
     stepSpecs:
     - computeResources:
         limits:
-          memory: 3Gi
+          memory: 5Gi
       name: run-tests
   taskRunTemplate:
     serviceAccountName: build-pipeline-rekor-server

.tekton/rekor-server-push.yaml

@@ -59,7 +59,7 @@ spec:
     stepSpecs:
     - computeResources:
         limits:
-          memory: 3Gi
+          memory: 5Gi
       name: run-tests
   taskRunTemplate:
     serviceAccountName: build-pipeline-rekor-server

Dockerfile.backfill-redis.rh

@@ -20,6 +20,7 @@ RUN go build -mod=readonly -trimpath -ldflags "$(SERVER_LDFLAGS)" -o backfill-re
 # Install stage
 FROM registry.redhat.io/rhel9/redis-6@sha256:0962d18bb5292c0e524354f319b63287c2298a4a2fd34556c68fa285df381427
 COPY --from=build-env /opt/app-root/src/backfill-redis /usr/local/bin/backfill-redis
+COPY LICENSE /licenses/license.txt
 WORKDIR /opt/app-root/src/home
 
 LABEL description="Backfillredis is a job that will go through the TLog and make sure that missing entries are added to the search index."
@@ -30,5 +31,7 @@ LABEL summary="Provides the backfill-redis binary for a rekor server"
 LABEL com.redhat.component="backfill-redis"
 LABEL name="rhtas/rekor-backfill-redis-rhel9"
 
+USER 65532:65532
+
 #ENTRYPOINT
 ENTRYPOINT [ "backfill-redis" ]

Dockerfile.rekor-cli.rh

@@ -48,6 +48,7 @@ COPY --from=build-env /opt/app-root/src/rekor_cli_linux_arm64.gz /usr/local/bin/
 COPY --from=build-env /opt/app-root/src/rekor_cli_linux_ppc64le.gz /usr/local/bin/rekor_cli_linux_ppc64le.gz
 COPY --from=build-env /opt/app-root/src/rekor_cli_linux_s390x.gz /usr/local/bin/rekor_cli_linux_s390x.gz
 COPY --from=build-env /opt/app-root/src/rekor_cli_windows_amd64.exe.gz /usr/local/bin/rekor_cli_windows_amd64.exe.gz
+COPY LICENSE /licenses/license.txt
 WORKDIR /opt/app-root/src/home
 
-
+USER 65532:65532

Dockerfile.rekor-server.rh

@@ -73,6 +73,9 @@ LABEL name="rhtas/rekor-server-rhel9"
 
 # Retrieve the binary from the previous stage
 COPY --from=build-env /opt/app-root/src/rekor-server /usr/local/bin/rekor-server
+COPY LICENSE /licenses/license.txt
+
+USER 65532:65532
 
 # Set the binary as the entrypoint of the container
 ENTRYPOINT ["rekor-server"]