Skip to content

fix(query): improve "last user is root" dockerfile query coverage - #8123

Draft
cx-andre-pereira wants to merge 74 commits into
masterfrom
AST-179935-Improve-Last-User-is-root-coverage
Draft

cx-andre-pereira wants to merge 74 commits into
masterfrom
AST-179935-Improve-Last-User-is-root-coverage

Conversation

@cx-andre-pereira

@cx-andre-pereira cx-andre-pereira commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Reason for Proposed Changes

Proposed Changes

  • Added missing values and new relevant test files.

I submit this contribution under the Apache-2.0 license.

…es and all files with prefix 'dockerfile.' as well as all files with the '.dockerfile' extension type in a case insensitive matter (improvement on first commit)
…sion, added support for all ubi8/debian files in case of valid dockerfile structure, added support for lower case dockerfile commands - most queries will have issues with this but relevant text files are properly detected as a 'dockerfile' as intended
…rors, fixed 'gitignore' files exclusion, docker parser will handle said case like before but with explicit 'gitignore' extension rather than 'possibleDockerfile' like before
…sion so that it 1- gets detected regardless of syntax inside 2- gets detected withouth checking syntax inside through the code optimizing detection speed for said files
…wice and minor simplificaton of query arguments
…test 105, improved uni tests to include new case insensitive samples
… unnecessary 'gitignore' case in analyzer's workers
…have to be explicitly set as unwanted to allign with '.gitignore' behaviour
… on unix based systems so that test files in pkg/ can be tested locally
…40477--Improvement-to-dockerfile-scanning
…40477--Improvement-to-dockerfile-scanning
…40477--Improvement-to-dockerfile-scanning
…40477--Improvement-to-dockerfile-scanning
…40477--Improvement-to-dockerfile-scanning
@cx-artur-ribeiro cx-artur-ribeiro changed the title fix(query): mprove "last user is root" dockerfile query coverage fix(query): improve "last user is root" dockerfile query coverage Sep 16, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant