[Charlesthebird]

Description

---

🤖 written by Claude (start)

Change Type

/kind fix

Changelog

The server image now runs on chainguard/static as a nonroot user with no shell or git, and fixes CVEs in klauspost/compress and OpenTelemetry.

Additional Notes

• The server has cloned Git sources with go-git since switch to go-git #698 and never shells out, so it needs neither git nor a shell.
• The image runs as the base's nonroot user (65532); the chart still runs it as UID 1001.
• Compose checks health with arctl-server healthcheck, and drops the sed kubeconfig rewrite and mount: the server never loads a kubeconfig, since its only Kubernetes client uses in-cluster config.
• Anyone who runs docker exec … sh in the server container loses that shell.

Scanner	Before	After
trivy	1 high, 28 medium, 22 low	1 medium, no fix available
grype	1 high, 135 medium, 26 low	1 medium, no fix available

Testing

1. Run make run-docker. docker compose -p agentregistry ps shows the server healthy.
2. Apply a Plugin with source.type: git and an HTTPS URL using arctl apply -f. arctl get plugin <name> -o yaml shows reason: Resolved and a resolvedSource.commit.

---

🤖 written by Claude (end)

🤖 Generated with Claude Code

[Charlesthebird]

Before is main, after is this PR. Each ran on fresh Postgres with examples/full-stack.yaml and the same Git plugin.

Area	Before	After
Trivy scan	48 OS + 4 binary findings, 1 high	2 in the binary, neither has a fix
Image	214 MB, runs as root, shell and git present	73 MB on chainguard/static, runs as 65532, no shell or git
docker compose up -d --wait	server healthy via a shell entrypoint	server healthy via arctl-server healthcheck, two images only
Git plugin over HTTPS	Resolved	Resolved to the same commit, also as UID 1001 with a read-only root
Catalog UI	loads servers and agents	same data, same UI

🤖 written by Claude

verify-711-v3.mp4

Screenshots

Before: catalog UI

After: catalog UI

---

🤖 written by Claude