Skip to content

santoshdtsdev/validate-dockerfile

Repository files navigation

Dockerfile validation

This WIP project focuses on automating the validation process of a Dockerfile by checking if the Dockerfile follows security best-practices.

  • Uses conftest to parse the Dockerfile to get structured JSON data to be fed to Cue/OPA
    • conftest parse Dockerfile > <Dockerfile JSON File NAME> to convert Dockerfile to JSON
  • validate-input-dockerfile.rego contains few policies written REGO to be used withh OPA
  • dockerfile-schema.cue contains a Cue definition of a Dockerfile
  • test-dockerfile.json contains a sample multi-stage Dockerfile in JSON format
  • OPA Playground test link for the same policies

About

Dockerfile validation

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published