tyler.durden
/
lynis
mirror of https://github.com/CISOfy/lynis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

detect if latest TAG is used (#575) 

that's always better to specify the version, latest desn't mean latest version 
it can be a suggestion if you prefer
This commit is contained in:
superpoussin22 2018-08-28 08:45:04 +02:00 committed by Michael Boelen
parent 52e71b7e93
commit 9fe6dcde76
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/helper_audit_dockerfile
View File

@ -61,17 +61,23 @@ fi
FIND=$(grep "^FROM" ${AUDIT_FILE} | sed 's/ /:space:/g')
for I in ${FIND}; do
IMAGE=$(echo ${I} | sed 's/:space:/ /g' | awk '{ if ($1=="FROM") { print $2 }}')
TAG=$(echo ${IMAGE} | cut -d':' -f2)
Display --indent 2 --text "Found image:" --result "${IMAGE}"
IS_DEBIAN=$(echo ${IMAGE} | grep -i debian)
IS_FEDORA=$(echo ${IMAGE} | grep -i fedora)
IS_UBUNTU=$(echo ${IMAGE} | grep -i ubuntu)
IS_ALPINE=$(echo ${IMAGE} | grep -i alpine)
IS_LATEST=$(echo ${TAG} | grep -i latest)
if [ ! "${IS_DEBIAN}" = "" ]; then IMAGE="debian"; fi
if [ ! "${IS_FEDORA}" = "" ]; then IMAGE="fedora"; fi
if [ ! "${IS_UBUNTU}" = "" ]; then IMAGE="ubuntu"; fi
if [ ! "${IS_ALPINE}" = "" ]; then IMAGE="alpine"; fi
if [ ! "${IS_LATEST}" = "" ]; then
ReportWarning "dockerfile" "latest TAG used. Specifying the version is better."
fi
case ${IMAGE} in
"debian")