Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug(dockerfile): apt-get Missing '-y' To Avoid Manual Input` #7053

Open
SpikePy opened this issue May 14, 2024 · 1 comment · May be fixed by #7060
Open

bug(dockerfile): apt-get Missing '-y' To Avoid Manual Input` #7053

SpikePy opened this issue May 14, 2024 · 1 comment · May be fixed by #7060
Assignees
Labels
appsec bug Something isn't working community Community contribution docker Docker query dockerfile query New query feature

Comments

@SpikePy
Copy link

SpikePy commented May 14, 2024

When linting a Dockerfile that has an apt-get install command I get the error 77783205-c4ca-4f80-bb80-c777f267c547 # APT-GET Missing '-y' To Avoid Manual Input. This is a false positive when using apt-get --quiet --quiet install sl or apt-get --yes install sl

Expected Behavior

  • No error is shown when using apt get --quiet --quiet as it implies -y/--yes
  • No error is shown when using apt get --yes which is the long form of -y

Actual Behavior

[Severity: LOW, Query description: Check if apt-get calls use the flag -y to avoid user manual input.] Problem found on 'docker/local-toolbox/Dockerfile_test' file in line 2. Expected value: {{RUN apt-get --yes install sl}} sould avoid manual input. Actual value: {{RUN apt-get --yes install sl}} doesn't avoid manual input.
@SpikePy SpikePy added bug Something isn't working community Community contribution labels May 14, 2024
@github-actions github-actions bot added query New query feature docker Docker query dockerfile labels May 14, 2024
@SpikePy SpikePy changed the title bug(Dockerfile): APT-GET Missing '-y' To Avoid Manual Input` bug(Dockerfile): apt-get Missing '-y' To Avoid Manual Input` May 14, 2024
@gabriel-cx gabriel-cx changed the title bug(Dockerfile): apt-get Missing '-y' To Avoid Manual Input` bug(dockerfile): apt-get Missing '-y' To Avoid Manual Input` May 14, 2024
@gabriel-cx
Copy link
Collaborator

Hi @SpikePy ,

Thank you for your inputs!
Our internal AppSec team soon will check it.
We will keep you updated.

(APPSEC-2556)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
appsec bug Something isn't working community Community contribution docker Docker query dockerfile query New query feature
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants