Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

imageVersionnotusinglatest and AC_DOCKER_0041 Issue #1099

Closed
ZNozomi opened this issue Dec 13, 2021 · 1 comment
Closed

imageVersionnotusinglatest and AC_DOCKER_0041 Issue #1099

ZNozomi opened this issue Dec 13, 2021 · 1 comment
Assignees
Labels
policy Issue concerning policy maintainers.

Comments

@ZNozomi
Copy link

ZNozomi commented Dec 13, 2021

The description for imageVersionnotusinglatest in AC_DOCKER_0041 is incorrect
The description is "Ensure platform flag with FROM command is not used for Docker file"
This is the exact same description as the one for docFilePlatformFlag in AC_DOCKER_0001

AC_DOCKER_0041, and thus imageVersionnotusinglatest, is not in the Docker Policies documentation
https://runterrascan.io/docs/policies/docker/

imageVersionnotusinglatest does not seem to work as intended
It should make a finding if the latest tag is used or if there is no tag
However, there are findings for "FROM python:alpine" and "FROM python:3.9"
Changing ":v" to ":" in line 12 of imageVersionnotusinglatest.rego fixes the issue

imageVersionnotusinglatest should be renamed to something like imageVersionUsingLatest to be consistent with other policies
Ex 1, runUsingApt makes a finding if apt is used with RUN
Ex 2, docFilePlatformFlag makes a finding if platform flag is used with FROM

@nasir-rabbani
Copy link
Contributor

closed by #1523

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
policy Issue concerning policy maintainers.
Projects
None yet
Development

No branches or pull requests

4 participants