Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func IsMultistage ¶
IsMultistage checks if Dockerfile content uses multistage builds by counting FROM statements
func ScanDockerfileContent ¶
ScanDockerfileContent checks a Dockerfile's content against patterns and returns matched lines Deprecated: Use ScanDockerfileForPatterns instead
func ScanDockerfileForPattern ¶
ScanDockerfileForPattern checks if a Dockerfile matches a specific pattern
Types ¶
type Finding ¶
type Finding struct {
ProjectPath string
ProjectURL string
FilePath string
FileName string
MatchedPattern string
LineContent string
IsMultistage bool
RegistryMetadata *RegistryMetadata
}
Finding represents a dangerous pattern found in a Dockerfile/Containerfile
type Pattern ¶
Pattern represents a dangerous pattern to detect
func DefaultPatterns ¶
func DefaultPatterns() []Pattern
DefaultPatterns returns the default dangerous patterns to detect in Dockerfiles
type PatternMatch ¶
PatternMatch represents a matched pattern with details
func ScanDockerfileForPatterns ¶
func ScanDockerfileForPatterns(content string, patterns []Pattern) []PatternMatch
ScanDockerfileForPatterns scans Dockerfile content and returns all pattern matches
type RegistryMetadata ¶
RegistryMetadata contains information about the most recent container image in the registry
Source Files