diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/metadata.json b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/metadata.json similarity index 61% rename from assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/metadata.json rename to assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/metadata.json index cafea4d8aaf..f27b58060d7 100644 --- a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/metadata.json +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/metadata.json @@ -1,12 +1,13 @@ { "id": "77783205-c4ca-4f80-bb80-c777f267c547", - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", + "queryName": "APT-GET Missing Flags To Avoid Manual Input", "severity": "LOW", "category": "Supply-Chain", - "descriptionText": "Check if apt-get calls use the flag -y to avoid user manual input.", + "descriptionText": "Check if apt-get calls use flags to avoid user manual input.", "descriptionUrl": "https://docs.docker.com/engine/reference/builder/#run", "platform": "Dockerfile", "descriptionID": "2064113b", + "cloudProvider": "common", "cwe": "710", "oldSeverity": "MEDIUM" } \ No newline at end of file diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/query.rego b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/query.rego new file mode 100644 index 00000000000..251c8de4840 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/query.rego @@ -0,0 +1,70 @@ +package Cx + +import data.generic.dockerfile as dockerLib +import future.keywords.contains + +CxPolicy[result] { + resource := input.document[i].command[name][_] + resource.Cmd == "run" + + count(resource.Value) == 1 + + commands := resource.Value[j] + command := dockerLib.getCommands(commands)[_] + isAptGet(command) + + not avoidManualInput(command) + + result := { + "documentId": input.document[i].id, + "searchKey": sprintf("FROM={{%s}}.{{%s}}", [name, resource.Original]), + "issueType": "IncorrectValue", + "keyExpectedValue": sprintf("{{%s}} should avoid manual input", [resource.Original]), + "keyActualValue": sprintf("{{%s}} doesn't avoid manual input", [resource.Original]), + } +} + +CxPolicy[result] { + resource := input.document[i].command[name][_] + resource.Cmd == "run" + + count(resource.Value) > 1 + + dockerLib.arrayContains(resource.Value, {"apt-get", "install"}) + + not avoidManualInputInList(resource.Value) + + result := { + "documentId": input.document[i].id, + "searchKey": sprintf("FROM={{%s}}.{{%s}}", [name, resource.Original]), + "issueType": "IncorrectValue", + "keyExpectedValue": sprintf("{{%s}} should avoid manual input", [resource.Original]), + "keyActualValue": sprintf("{{%s}} doesn't avoid manual input", [resource.Original]), + } +} + +isAptGet(command) { + regex.match("apt-get (-(-)?[a-zA-Z]+ *)*install", command) +} + +avoidManualInputInList(command) { + flags := ["-y", "--yes", "--assume-yes", "-qy", "-q=2", "-qq"] + flagfound := contains(command[_], flags[_]) + flagfound +} else { + flagsquiet := ["-q","--quiet"] + quietflag := {z | command[y] == flagsquiet[_]; z := y} + count(quietflag) == 2 +} + +avoidManualInput(command) { + regex.match("apt-get (-(-)?[a-zA-Z]+ *)*(-([A-Za-z])*y|--yes|-qq|-q=2|--assume-yes|(-q|--quiet)(.*(-q|--quiet)){1}) (-(-)?[a-zA-Z]+ *)*install", command) +} + +avoidManualInput(command) { + regex.match("apt-get (-(-)?[a-zA-Z]+ *)*install (-(-)?[a-zA-Z]+ *)*(-([A-Za-z])*y|--yes|-qq|-q=2|--assume-yes|(-q|--quiet)(.*(-q|--quiet)){1})", command) +} + +avoidManualInput(command) { + regex.match("apt-get (-(-)?[a-zA-Z]+ *)*install ([A-Za-z0-9\\W]+ *)*(-([A-Za-z])*y|--yes|-qq|-q=2|--assume-yes|(-q|--quiet)(.*(-q|--quiet)){1})", command) +} diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/negative1.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative1.dockerfile similarity index 100% rename from assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/negative1.dockerfile rename to assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative1.dockerfile diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/negative2.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative2.dockerfile similarity index 100% rename from assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/negative2.dockerfile rename to assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative2.dockerfile diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative3.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative3.dockerfile new file mode 100644 index 00000000000..ee3affcd7d3 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative3.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN apt-get --yes install apt-utils +RUN ["sudo", "apt-get", "--yes" ,"install", "apt-utils"] diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative4.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative4.dockerfile new file mode 100644 index 00000000000..23f54b2d5f9 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative4.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN sudo apt-get -qq install apt-utils +RUN ["apt-get", "-qq", "install", "apt-utils"] diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative5.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative5.dockerfile new file mode 100644 index 00000000000..cd1c3445323 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative5.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN apt-get --assume-yes install apt-utils +RUN ["sudo", "apt-get", "--assume-yes", "install", "apt-utils"] diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative6.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative6.dockerfile new file mode 100644 index 00000000000..052d18320f6 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative6.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN sudo apt-get -q=2 install apt-utils +RUN ["apt-get", "-q=2", "install", "apt-utils"] \ No newline at end of file diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative7.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative7.dockerfile new file mode 100644 index 00000000000..a706b837420 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative7.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN apt-get --quiet --quiet install sl +RUN ["apt-get", "--quiet", "--quiet" ,"install", "apt-utils"] diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative8.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative8.dockerfile new file mode 100644 index 00000000000..822716e0fe6 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/negative8.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN apt-get -q -q install sl +RUN ["apt-get", "-q", "-q", "apt-utils"] diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive1.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive1.dockerfile similarity index 100% rename from assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive1.dockerfile rename to assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive1.dockerfile diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive2.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive2.dockerfile similarity index 100% rename from assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive2.dockerfile rename to assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive2.dockerfile diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive3.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive3.dockerfile similarity index 100% rename from assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive3.dockerfile rename to assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive3.dockerfile diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive4.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive4.dockerfile new file mode 100644 index 00000000000..ce8ce3d9425 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive4.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN ["sudo", "apt-get", "-q" ,"install", "apt-utils"] +RUN sudo apt-get -q install apt-utils diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive5.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive5.dockerfile new file mode 100644 index 00000000000..1a53e550c5d --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive5.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN ["sudo", "apt-get", "--quiet", "install", "apt-utils"] +RUN sudo apt-get --quiet install apt-utils \ No newline at end of file diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive6.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive6.dockerfile new file mode 100644 index 00000000000..71265e1afdb --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive6.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN sudo apt-get --quiet install sl +RUN ["apt-get", "--quiet" ,"install", "apt-utils"] \ No newline at end of file diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive7.dockerfile b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive7.dockerfile new file mode 100644 index 00000000000..31a8b223f13 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive7.dockerfile @@ -0,0 +1,3 @@ +FROM node:12 +RUN sudo apt-get -q install sl +RUN ["apt-get", "-q", "install", "apt-utils"] \ No newline at end of file diff --git a/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive_expected_result.json b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive_expected_result.json new file mode 100644 index 00000000000..eb501cf7739 --- /dev/null +++ b/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input/test/positive_expected_result.json @@ -0,0 +1,92 @@ +[ + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive1.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 3, + "filename": "positive1.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 4, + "filename": "positive1.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive2.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 3, + "filename": "positive2.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 4, + "filename": "positive2.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive3.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive4.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 3, + "filename": "positive4.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 3, + "filename": "positive5.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive5.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 3, + "filename": "positive6.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive6.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 3, + "filename": "positive7.dockerfile" + }, + { + "queryName": "APT-GET Missing Flags To Avoid Manual Input", + "severity": "LOW", + "line": 2, + "filename": "positive7.dockerfile" + } +] \ No newline at end of file diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/query.rego b/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/query.rego deleted file mode 100644 index 59e376a0799..00000000000 --- a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/query.rego +++ /dev/null @@ -1,65 +0,0 @@ -package Cx - -import data.generic.dockerfile as dockerLib - -CxPolicy[result] { - resource := input.document[i].command[name][_] - resource.Cmd == "run" - - count(resource.Value) == 1 - - commands := resource.Value[j] - command := dockerLib.getCommands(commands)[_] - isAptGet(command) - - not avoidManualInput(command) - - result := { - "documentId": input.document[i].id, - "searchKey": sprintf("FROM={{%s}}.{{%s}}", [name, resource.Original]), - "issueType": "IncorrectValue", - "keyExpectedValue": sprintf("{{%s}} sould avoid manual input", [resource.Original]), - "keyActualValue": sprintf("{{%s}} doesn't avoid manual input", [resource.Original]), - } -} - -CxPolicy[result] { - resource := input.document[i].command[name][_] - resource.Cmd == "run" - - count(resource.Value) > 1 - - dockerLib.arrayContains(resource.Value, {"apt-get", "install"}) - - not avoidManualInputInList(resource.Value) - - result := { - "documentId": input.document[i].id, - "searchKey": sprintf("FROM={{%s}}.{{%s}}", [name, resource.Original]), - "issueType": "IncorrectValue", - "keyExpectedValue": sprintf("{{%s}} should avoid manual input", [resource.Original]), - "keyActualValue": sprintf("{{%s}} doesn't avoid manual input", [resource.Original]), - } -} - -isAptGet(command) { - regex.match("apt-get (-(-)?[a-zA-Z]+ *)*install", command) -} - -avoidManualInputInList(command) { - flags := ["-y", "yes", "--assumeyes", "-qy"] - - contains(command[j], flags[x]) -} - -avoidManualInput(command) { - regex.match("apt-get (-(-)?[a-zA-Z]+ *)*(-([A-Za-z])*y|-yes|--assumeyes) (-(-)?[a-zA-Z]+ *)*install", command) -} - -avoidManualInput(command) { - regex.match("apt-get (-(-)?[a-zA-Z]+ *)*install (-(-)?[a-zA-Z]+ *)*(-([A-Za-z])*y|-yes|--assumeyes)", command) -} - -avoidManualInput(command) { - regex.match("apt-get (-(-)?[a-zA-Z]+ *)*install ([A-Za-z0-9\\W]+ *)*(-([A-Za-z])*y|-yes|--assumeyes)", command) -} diff --git a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive_expected_result.json b/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive_expected_result.json deleted file mode 100644 index 4ea58870642..00000000000 --- a/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input/test/positive_expected_result.json +++ /dev/null @@ -1,44 +0,0 @@ -[ - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 2, - "filename": "positive1.dockerfile" - }, - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 3, - "filename": "positive1.dockerfile" - }, - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 4, - "filename": "positive1.dockerfile" - }, - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 2, - "filename": "positive2.dockerfile" - }, - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 3, - "filename": "positive2.dockerfile" - }, - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 4, - "filename": "positive2.dockerfile" - }, - { - "queryName": "APT-GET Missing '-y' To Avoid Manual Input", - "severity": "LOW", - "line": 2, - "filename": "positive3.dockerfile" - } -] \ No newline at end of file diff --git a/docs/queries/all-queries.md b/docs/queries/all-queries.md index 5b62f34a322..c790ed7bdc2 100644 --- a/docs/queries/all-queries.md +++ b/docs/queries/all-queries.md @@ -621,7 +621,7 @@ This page contains all queries. |WORKDIR Path Not Absolute
6b376af8-cfe8-49ab-a08d-f32de23661a4|Dockerfile|Low|Build Process|Query details
Documentation
| |Healthcheck Instruction Missing
b03a748a-542d-44f4-bb86-9199ab4fd2d5|Dockerfile|Low|Insecure Configurations|Query details
Documentation
| |Shell Running A Pipe Without Pipefail Flag
efbf148a-67e9-42d2-ac47-02fa1c0d0b22|Dockerfile|Low|Insecure Defaults|Query details
Documentation
| -|APT-GET Missing '-y' To Avoid Manual Input
77783205-c4ca-4f80-bb80-c777f267c547|Dockerfile|Low|Supply-Chain|Query details
Documentation
| +|APT-GET Missing Flags To Avoid Manual Input
77783205-c4ca-4f80-bb80-c777f267c547|Dockerfile|Low|Supply-Chain|Query details
Documentation
| |Missing Flag From Dnf Install
7ebd323c-31b7-4e5b-b26f-de5e9e477af8|Dockerfile|Low|Supply-Chain|Query details
Documentation
| |Run Using 'wget' and 'curl'
fc775e75-fcfb-4c98-b2f2-910c5858b359|Dockerfile|Low|Supply-Chain|Query details
Documentation
| |Run Using apt
b84a0b47-2e99-4c9f-8933-98bcabe2b94d|Dockerfile|Low|Supply-Chain|Query details
Documentation
| diff --git a/docs/queries/dockerfile-queries.md b/docs/queries/dockerfile-queries.md index 4afff5ac246..3dd267be650 100644 --- a/docs/queries/dockerfile-queries.md +++ b/docs/queries/dockerfile-queries.md @@ -40,7 +40,7 @@ This page contains all queries from Dockerfile. |WORKDIR Path Not Absolute
6b376af8-cfe8-49ab-a08d-f32de23661a4|Low|Build Process|Query details
Documentation
| |Healthcheck Instruction Missing
b03a748a-542d-44f4-bb86-9199ab4fd2d5|Low|Insecure Configurations|Query details
Documentation
| |Shell Running A Pipe Without Pipefail Flag
efbf148a-67e9-42d2-ac47-02fa1c0d0b22|Low|Insecure Defaults|Query details
Documentation
| -|APT-GET Missing '-y' To Avoid Manual Input
77783205-c4ca-4f80-bb80-c777f267c547|Low|Supply-Chain|Query details
Documentation
| +|APT-GET Missing Flags To Avoid Manual Input
77783205-c4ca-4f80-bb80-c777f267c547|Low|Supply-Chain|Query details
Documentation
| |Missing Flag From Dnf Install
7ebd323c-31b7-4e5b-b26f-de5e9e477af8|Low|Supply-Chain|Query details
Documentation
| |Run Using 'wget' and 'curl'
fc775e75-fcfb-4c98-b2f2-910c5858b359|Low|Supply-Chain|Query details
Documentation
| |Run Using apt
b84a0b47-2e99-4c9f-8933-98bcabe2b94d|Low|Supply-Chain|Query details
Documentation
| diff --git a/docs/queries/dockerfile-queries/77783205-c4ca-4f80-bb80-c777f267c547.md b/docs/queries/dockerfile-queries/77783205-c4ca-4f80-bb80-c777f267c547.md index 7803cabb1da..2fe23796c42 100644 --- a/docs/queries/dockerfile-queries/77783205-c4ca-4f80-bb80-c777f267c547.md +++ b/docs/queries/dockerfile-queries/77783205-c4ca-4f80-bb80-c777f267c547.md @@ -1,5 +1,5 @@ --- -title: APT-GET Missing '-y' To Avoid Manual Input +title: APT-GET Missing Flag To Avoid Manual Input hide: toc: true navigation: true @@ -16,11 +16,11 @@ hide: - **Query id:** 77783205-c4ca-4f80-bb80-c777f267c547 -- **Query name:** APT-GET Missing '-y' To Avoid Manual Input +- **Query name:** APT-GET Missing Flags To Avoid Manual Input - **Platform:** Dockerfile - **Severity:** Low - **Category:** Supply-Chain -- **URL:** [Github](https://github.com/Checkmarx/kics/tree/master/assets/queries/dockerfile/apt_get_missing_yes_flag_to_avoid_manual_input) +- **URL:** [Github](https://github.com/Checkmarx/kics/tree/master/assets/queries/dockerfile/apt_get_missing_flags_to_avoid_manual_input) ### Description Check if apt-get calls use the flag -y to avoid user manual input.
diff --git a/test/main_test.go b/test/main_test.go index 9cdebacd972..628d91a61bc 100644 --- a/test/main_test.go +++ b/test/main_test.go @@ -303,4 +303,4 @@ func getQueryFilter() *source.QueryInspectorParameters { ExcludeQueries: source.ExcludeQueries{ByIDs: []string{}, ByCategories: []string{}}, InputDataPath: "", } -} +} \ No newline at end of file