Property
Languageterraform
Severitycritical
Vulnerability Typeomission

Description#

Defining multiple ENTRYPOINT instructions in a Dockerfile causes only the last one to be used, rendering previous ENTRYPOINT commands ineffective. This can lead to unexpected container behavior and misconfiguration.

Impact#

Critical application processes may not start as intended, potentially resulting in containers running the wrong commands or failing to launch. This can disrupt services, introduce security risks, and make containers behave unpredictably in production.

Resolution#

Remove unnecessary ENTRYPOINT instruction.