> cat /dev/github | grep security-tools
discovered 03 Aug 2026

setcap-static

C ★ 10 via github-topic
→ View on GitHub
`setcap-static` is a streamlined, statically linked tool designed to set file capabilities, particularly useful in containerized environments where non-root execution is required while maintaining specific privileges, such as binding to low-numbered ports. It addresses the limitations of Docker's `COPY` command, which does not preserve extended attributes, by allowing capabilities to be assigned directly in the target image, and it features self-deletion to minimize attack vectors by removing itself after execution. This tool is particularly advantageous in scratch images, enhancing security while facilitating necessary privilege assignments for applications.