{"action":"created","issue":{"url":"https://api.github.com/repos/yegor256/rultor/issues/1259","repository_url":"https://api.github.com/repos/yegor256/rultor","labels_url":"https://api.github.com/repos/yegor256/rultor/issues/1259/labels{/name}","comments_url":"https://api.github.com/repos/yegor256/rultor/issues/1259/comments","events_url":"https://api.github.com/repos/yegor256/rultor/issues/1259/events","html_url":"https://github.com/yegor256/rultor/issues/1259","id":322591741,"node_id":"MDU6SXNzdWUzMjI1OTE3NDE=","number":1259,"title":"Docker daemon is not used securely","user":{"login":"g4s8","id":1524988,"node_id":"MDQ6VXNlcjE1MjQ5ODg=","avatar_url":"https://avatars0.githubusercontent.com/u/1524988?v=4","gravatar_id":"","url":"https://api.github.com/users/g4s8","html_url":"https://github.com/g4s8","followers_url":"https://api.github.com/users/g4s8/followers","following_url":"https://api.github.com/users/g4s8/following{/other_user}","gists_url":"https://api.github.com/users/g4s8/gists{/gist_id}","starred_url":"https://api.github.com/users/g4s8/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/g4s8/subscriptions","organizations_url":"https://api.github.com/users/g4s8/orgs","repos_url":"https://api.github.com/users/g4s8/repos","events_url":"https://api.github.com/users/g4s8/events{/privacy}","received_events_url":"https://api.github.com/users/g4s8/received_events","type":"User","site_admin":false},"labels":[{"id":28849901,"node_id":"MDU6TGFiZWwyODg0OTkwMQ==","url":"https://api.github.com/repos/yegor256/rultor/labels/bug","name":"bug","color":"fc2929","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":15,"created_at":"2018-05-13T12:57:16Z","updated_at":"2018-06-24T23:37:26Z","closed_at":null,"author_association":"NONE","body":"Rultor container can use Docker daemon without restriction, e.g. it can execute\r\n`docker run -v /:/host` and access Rultor host root filesystem. To prevent it https://github.com/Tecnativa/docker-socket-proxy may be used, it can grant access only to required APIs (build, tag, push) to container."},"comment":{"url":"https://api.github.com/repos/yegor256/rultor/issues/comments/399798072","html_url":"https://github.com/yegor256/rultor/issues/1259#issuecomment-399798072","issue_url":"https://api.github.com/repos/yegor256/rultor/issues/1259","id":399798072,"node_id":"MDEyOklzc3VlQ29tbWVudDM5OTc5ODA3Mg==","user":{"login":"0crat","id":24387511,"node_id":"MDQ6VXNlcjI0Mzg3NTEx","avatar_url":"https://avatars1.githubusercontent.com/u/24387511?v=4","gravatar_id":"","url":"https://api.github.com/users/0crat","html_url":"https://github.com/0crat","followers_url":"https://api.github.com/users/0crat/followers","following_url":"https://api.github.com/users/0crat/following{/other_user}","gists_url":"https://api.github.com/users/0crat/gists{/gist_id}","starred_url":"https://api.github.com/users/0crat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0crat/subscriptions","organizations_url":"https://api.github.com/users/0crat/orgs","repos_url":"https://api.github.com/users/0crat/repos","events_url":"https://api.github.com/users/0crat/events{/privacy}","received_events_url":"https://api.github.com/users/0crat/received_events","type":"User","site_admin":false},"created_at":"2018-06-24T23:37:26Z","updated_at":"2018-06-24T23:37:26Z","author_association":"COLLABORATOR","body":"@yegor256[/z](https://www.0crat.com/u/yegor256) everybody who has role `DEV` is banned at [#1259](https://github.com/yegor256/rultor/issues/1259); I won't be able to assign anyone automatically; consider assigning someone manually (as in [§19](http://www.zerocracy.com/policy.html#19)), or invite more people (as in [§51](http://www.zerocracy.com/policy.html#51)), or remove the job from the scope (as in [§14](http://www.zerocracy.com/policy.html#14))\n\n<!-- https://www.0crat.com/footprint/C3SAYRPH9/1752373130, version: 0.23.1, hash: ${buildNumber} -->"}}
{"actor":{"display_login":"0crat"}}