Skip to content
This repository has been archived by the owner on Feb 16, 2022. It is now read-only.

DS005 issue when source is URL #127

Open
TeroPihlaja opened this issue Aug 19, 2021 · 0 comments
Open

DS005 issue when source is URL #127

TeroPihlaja opened this issue Aug 19, 2021 · 0 comments

Comments

@TeroPihlaja
Copy link

I have a problem with DS005 rule where the source is a URL and not a file.

Trivy suggest changing ADD to COPY but COPY doesn't support URL as source.

Would it be possible to modify the rule to ignore this suggestion if the source is a URL?

Rule suggestion:

Consider using
'COPY https://.../co/elastic/apm/elastic-apm-agent/${ELASTIC_APM_AGENT_VERSION}/elastic-apm-agent-${ELASTIC_APM_AGENT_VERSION}.jar elastic-apm-agent.jar'
command instead of
'ADD https://.../co/elastic/apm/elastic-apm-agent/${ELASTIC_APM_AGENT_VERSION}/elastic-apm-agent-${ELASTIC_APM_AGENT_VERSION}.jar elastic-apm-agent.jar'
-->avd.aquasec.com/appshield/ds005

Docker error:
COPY failed: source can't be a URL for COPY

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant