This rule enforces the use of either wget or curl exclusively within a Dockerfile, but not both. Mixing these two tools in the same Dockerfile can lead to unnecessary complexity and larger image sizes due to installing multiple similar utilities. It also reduces consistency and maintainability of the Dockerfile.
To comply with this rule, choose either wget or curl based on your preference or the base image’s default availability, and use it consistently throughout your Dockerfile. For example, if you decide to use curl, replace all occurrences of wget with equivalent curl commands like curl -O <url>. This approach ensures clarity and reduces the image footprint.
Non-Compliant Code Examples
FROM debianRUN curl http://bing.comADD something somethingelseRUN wget http://google.com
FROM debianRUN wget http://google.comADD something somethingelseRUN curl http://bing.com
Compliant Code Examples
FROM debianRUN curl http://google.comRUN curl http://bing.com
シームレスな統合。 Datadog Code Security をお試しください
Datadog Code Security
このルールを試し、Datadog Code Security でコードを解析する
このルールの使用方法
1
2
rulesets:- docker-best-practices # Rules to enforce Docker best practices.
