fix: harden wordpress edge exposure

2026-06-25 22:57:43 +02:00
parent 02e05ec3b6
commit 82ae9eaae4
11 changed files with 91 additions and 7 deletions
@@ -42,6 +42,21 @@ services:
      - no-new-privileges:true
    pids_limit: 200

+  security-tests:
+    image: wordpress:cli-2.12.0-php8.3
+    init: true
+    user: "33:33"
+    command: ["/bin/sh", "/workspace/tests/security/check-compose.sh"]
+    working_dir: /workspace
+    volumes:
+      - .:/workspace:ro
+    profiles: ["test"]
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    pids_limit: 50
+
 volumes:
  test_db_data:
  test_wordpress_data: