Metadata

ID: docker-best-practices/change-default-shell

Language: Docker

Severity: Warning

Category: Best Practices

Description

This rule encourages the use of the SHELL instruction to explicitly change the default shell in a Dockerfile rather than modifying it indirectly through commands like RUN ln -sfv /bin/bash /bin/sh. Using SHELL provides a clear and declarative way to specify which shell should be used for subsequent instructions, improving readability and maintainability.

To comply with this rule, replace any commands that attempt to change the default shell indirectly, such as RUN ln -sfv /bin/bash /bin/sh, with the SHELL instruction like SHELL ["/bin/bash", "-c"]. This approach keeps your Dockerfile clean and ensures consistent execution of shell commands.

Non-Compliant Code Examples

ADD something somethingelse

RUN ln -sfv /bin/bash /bin/sh

Compliant Code Examples

ADD something somethingelse

SHELL ["/bin/bash", "-c"]

원활한 통합. Datadog Code Security를 경험해 보세요

Datadog Code Security