OrbisAI Sec b5ebd20314 fix(core): prevent container privilege escalation in .devcontainer/docker-compose.yml (#13814) ...

**Context and Purpose:**

This PR automatically remediates a security vulnerability:
- **Description:** Service 'app' allows for privilege escalation via
setuid or setgid binaries. Add 'no-new-privileges:true' in
'security_opt' to prevent this.
- **Rule ID:**
yaml.docker-compose.security.no-new-privileges.no-new-privileges
- **Severity:** HIGH
- **File:** .devcontainer/docker-compose.yml
- **Lines Affected:** 4 - 4

This change is necessary to protect the application from potential
security risks associated with this vulnerability.

**Solution Implemented:**

The automated remediation process has applied the necessary changes to
the affected code in `.devcontainer/docker-compose.yml` to resolve the
identified issue.

Please review the changes to ensure they are correct and integrate as
expected.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
  * Enhanced security configuration for the development environment.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2025-10-28 13:34:04 +08:00

..

build.sh

chore(server): disable indexer on self-host by default (#12452)

2025-05-23 09:45:31 +00:00

devcontainer.json

chore: fix github codesapce init (#11590)

2025-04-10 07:33:02 +00:00

docker-compose.yml

fix(core): prevent container privilege escalation in .devcontainer/docker-compose.yml (#13814)

2025-10-28 13:34:04 +08:00

setup-user.sh

chore: fix github codesapce init (#11590)

2025-04-10 07:33:02 +00:00