fix(checks): handle file: and multi: in AVD-DS-0011 - #56
Conversation
candrews
changed the title
ADD file: in in AVD-DS-0011
|
I've never used rego before and I'm having trouble grokking it and I'm very confident that the tests aren't actually running when I run |
candrews
changed the title
ADD file: in in AVD-DS-0011file: and multi: in AVD-DS-0011
You are right, the tests are in the process of being brought over to this repo. We'll take a look at your PRs once we merge the tests in to ensure nothing breaks. |
|
@simar7 can you please help me progress this MR? I'm very eager to eliminate this false positive. |
|
@nikpivkin could you take a look? |
The reverse engineered `Dockerfile` of an image doesn't exactly match the original `Dockerfile`. For example, it doesn't have the original source files names. Instead, it uses `file:<hash> in`: `COPY file:8b8864b3e02a33a579dc216fd51b28a6047bc8eeaa03045b258980fe0cf7fcb3 in /__cacert_entrypoint.sh` Such commands should not trigger AVD-DS-0011.
3 participants
The reverse engineered
Dockerfileof an image doesn't exactly matchthe original
Dockerfile. For example, it doesn't have the originalsource files names. Instead, it uses
file:<hash> in:COPY file:8b8864b3e02a33a579dc216fd51b28a6047bc8eeaa03045b258980fe0cf7fcb3 in /__cacert_entrypoint.shSuch commands should not trigger AVD-DS-0011.