Repository navigation
fix(query): improve "last user is root" dockerfile query coverage - #8123
Merged
cx-artur-ribeiro merged 86 commits intoOct 1, 2026
Merged
Conversation
…s named 'dockerfile'
…es and all files with prefix 'dockerfile.' as well as all files with the '.dockerfile' extension type in a case insensitive matter (improvement on first commit)
…sion, added support for all ubi8/debian files in case of valid dockerfile structure, added support for lower case dockerfile commands - most queries will have issues with this but relevant text files are properly detected as a 'dockerfile' as intended
…ormats for consistency
…ility to lower cyclomatic complexity
…rors, fixed 'gitignore' files exclusion, docker parser will handle said case like before but with explicit 'gitignore' extension rather than 'possibleDockerfile' like before
…sion so that it 1- gets detected regardless of syntax inside 2- gets detected withouth checking syntax inside through the code optimizing detection speed for said files
…wice and minor simplificaton of query arguments
…test 105, improved uni tests to include new case insensitive samples
… dockerfiles as '.dockerfile'
…ailing whitespace
… unnecessary 'gitignore' case in analyzer's workers
…have to be explicitly set as unwanted to allign with '.gitignore' behaviour
…40477--Improvement-to-dockerfile-scanning
cx-artur-ribeiro
changed the title
Contributor
✅ No secrets detectedTruffleHog found no secrets in the current commits of this PR. |
cx-andre-pereira
added
dockerfile
docker
cx-artur-ribeiro
marked this pull request as ready for review
October 1, 2026 11:02
…b.com:Checkmarx/kics into AST-179935-Improve-Last-User-is-root-coverage
cx-julio-silva
approved these changes
Oct 1, 2026
cx-artur-ribeiro
deleted the
AST-179935-Improve-Last-User-is-root-coverage
branch
October 1, 2026 14:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reason for Proposed Changes
0:rootroot:0USER root:wheelUSER 0:1000+0:wheelProposed Changes
I submit this contribution under the Apache-2.0 license.