Fix SDLE security vulnerabilities: CWE-295 and container root user issues

Signed-off-by: gopal-raj-suresh <gopal.raj.dummugudupu@cloud2labs.com>

Author: gopal-raj-suresh

sample_solutions/MultiAgentQnA/api/Dockerfile

@@ -12,6 +12,10 @@ RUN pip install --no-cache-dir -r requirements.txt
 # Copy the rest of the application files into the container
 COPY . .
 
+RUN groupadd -r appuser && useradd -r -g appuser appuser
+RUN chown -R appuser:appuser /app
+USER appuser
+
 # Expose the port the service runs on
 EXPOSE 5001
 

sample_solutions/MultiAgentQnA/api/services/api_client.py

@@ -21,7 +21,7 @@ def __init__(self):
         self.embedding_base_url = config.EMBEDDING_API_ENDPOINT
         self.inference_base_url = config.INFERENCE_API_ENDPOINT
         self.token = config.INFERENCE_API_TOKEN
-        self.http_client = httpx.Client(verify=False)
+        self.http_client = httpx.Client()
         logger.info(f"✓ API Client initialized - Embedding: {self.embedding_base_url}, Inference: {self.inference_base_url}")
 
     def get_embedding_client(self):

sample_solutions/MultiAgentQnA/ui/Dockerfile

@@ -12,6 +12,10 @@ RUN npm install
 # Copy the rest of the application files
 COPY . .
 
+RUN groupadd -r nodeuser && useradd -r -g nodeuser nodeuser
+RUN chown -R nodeuser:nodeuser /app
+USER nodeuser
+
 # Expose the port the app runs on
 EXPOSE 3000