For AI agents: A markdown version of this page is available at https://docs.datadoghq.com/security/code_security/static_analysis/static_analysis_rules/docker-best-practices/avoid-chmod-777.md. A documentation index is available at /llms.txt.

Do not give wide permissions on files

This product is not supported for your selected Datadog site. ().

Metadata

ID: docker-best-practices/avoid-chmod-777

Language: Docker

Severity: Warning

Category: Security

CWE: 732

Related CWEs:

Description

Make sure you do not give too many permissions with copying or adding a file. Adding write permissions to all means that any other users may modify the files.

Non-Compliant Code Examples

ADD --chmod=777 src dst
COPY --chmod=777 src dst

Compliant Code Examples

ADD --chmod=755 src dst
COPY --chmod=755 src dst
https://static.datadoghq.com/static/images/logos/github_avatar.svg https://static.datadoghq.com/static/images/logos/vscode_avatar.svg jetbrains

Seamless integrations. Try Datadog Code Security

Datadog Code Security