Security

Dockerfile uses 'sudo' in RUN instructions. This is unnecessary during

Dockerfile mounts Docker socket. This gives the container full control over the host Docker daemon, equivalent to root access.

Dockerfile does not specify USER instruction. Container will run as root by default, which increases the attack surface if the container is compromised.

Build argument name suggests it contains a secret. ARG values are visible in image history via 'docker history'.