allow filesystem entitlements by default

Signed-off-by: CrazyMax <[email protected]>
docker · Nov 22, 2024 · 266c359 · 266c359
1 parent 1417204
commit 266c359
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/src/context.ts b/src/context.ts
@@ -83,9 +83,8 @@ async function getBakeArgs(inputs: Inputs, definition: BakeDefinition, toolkit:
     args.push(inputs.source);
   }
   if (await toolkit.buildx.versionSatisfies('>=0.17.0')) {
-    if (inputs.allow.length > 0) {
-      args.push('--allow', inputs.allow.join(','));
-    }
+    inputs.allow.push('fs=/'); // allow filesystem entitlements by default
+    args.push('--allow', inputs.allow.join(','));
   }
   await Util.asyncForEach(inputs.files, async file => {
     args.push('--file', file);