✨ adds USER instruction to Dockerfile

[scottford-io]

This PR adds the USER instruction to the Dockerfile resource in order to write checks against the configured user.

EXAMPLES THAT SHOULD PASS

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
USER pyuser
COPY . /app
RUN make /app
CMD python /app/app.py

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
USER pyuser:pyuser
COPY . /app
RUN make /app
CMD python /app/app.py

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
USER 1001:1001
COPY . /app
RUN make /app
CMD python /app/app.py

EXAMPLES THAT SHOULD FAIL

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
COPY . /app
RUN make /app
CMD python /app/app.py

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
USER root
COPY . /app
RUN make /app
CMD python /app/app.py

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
USER 0
COPY . /app
RUN make /app
CMD python /app/app.py

# syntax=docker/dockerfile:1

FROM ubuntu:22.04
USER 0:0
COPY . /app
RUN make /app
CMD python /app/app.py

[github-actions]

Test Results

2 987 tests  +3   2 986 ✅ +3   1m 35s ⏱️ +5s
  329 suites ±0       1 💤 ±0 
   23 files   ±0       0 ❌ ±0 

Results for commit f6dcab9. ± Comparison against base commit 8e61400.

This pull request removes 3 and adds 6 tests. Note that renamed tests count towards both.

go.mondoo.com/cnquery/v11/llx ‑ TestSuccess/2024-05-06_08:31:33.686377325_+0000_UTC_m=+0.008477650
go.mondoo.com/cnquery/v11/llx ‑ TestTruthy/2024-05-06_08:31:33.686377325_+0000_UTC_m=+0.008477650
go.mondoo.com/cnquery/v11/llx ‑ TestTruthy/2024-05-06_08:31:33.686377325_+0000_UTC_m=+0.008477650#01

go.mondoo.com/cnquery/v11/llx ‑ TestSuccess/2024-05-06_08:24:27.283643743_+0000_UTC_m=+0.009431476
go.mondoo.com/cnquery/v11/llx ‑ TestTruthy/2024-05-06_08:24:27.283643743_+0000_UTC_m=+0.009431476
go.mondoo.com/cnquery/v11/llx ‑ TestTruthy/2024-05-06_08:24:27.283643743_+0000_UTC_m=+0.009431476#01
go.mondoo.com/cnquery/v11/providers/os/resources ‑ TestParseDockerfile/minimal_instructions_with_CMD
go.mondoo.com/cnquery/v11/providers/os/resources ‑ TestParseDockerfile/with_all_instructions
go.mondoo.com/cnquery/v11/providers/os/resources ‑ TestParseDockerfile/without_CMD_but_with_ENTRYPOINT

♻️ This comment has been updated with latest results.

[github-actions]

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

[afiune]

I have read the Mondoo CLA Document and I hereby sign the CLA