mirror of
https://github.com/docker/docker-bench-security.git
synced 2025-01-19 00:32:34 +01:00
accept only if ADD in / #362
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
This commit is contained in:
parent
5370aef248
commit
740439d352
1 changed files with 2 additions and 2 deletions
|
@ -224,8 +224,8 @@ check_4_9() {
|
||||||
fail=0
|
fail=0
|
||||||
add_images=""
|
add_images=""
|
||||||
for img in $images; do
|
for img in $images; do
|
||||||
if docker history --format "{{ .CreatedBy }}" --no-trunc "$img" | sed '$d' |\
|
if docker history --format "{{ .CreatedBy }}" --no-trunc "$img" | \
|
||||||
grep -q 'ADD'; then
|
sed '$d' | grep -q 'ADD.*in /\s$'; then
|
||||||
if [ $fail -eq 0 ]; then
|
if [ $fail -eq 0 ]; then
|
||||||
fail=1
|
fail=1
|
||||||
info "$check_4_9"
|
info "$check_4_9"
|
||||||
|
|
Loading…
Reference in a new issue