Security

Dockerfile uses sudo in RUN instructions. This is unnecessary during build (already root) and increases security risk if sudo remains in the final image. Use USER instruction for privilege changes instead.

Dockerfile does not specify USER instruction. Container will run as root by default, which increases the attack surface if the container is compromised.

Build argument name suggests it contains a secret. ARG values are visible in image history via 'docker history'.

Dockerfile mounts Docker socket. This gives the container full control over the host Docker daemon, equivalent to root access.