30 lines
465 B
Plaintext
30 lines
465 B
Plaintext
|
include::../description.adoc[]
|
||
|
|
|
||
|
|
include::../ask-yourself.adoc[]
|
||
|
|
|
||
|
|
include::../recommended.adoc[]
|
||
|
|
|
||
|
|
== Sensitive Code Example
|
||
|
|
|
||
|
|
[source,docker]
|
||
|
|
----
|
||
|
|
# syntax=docker/dockerfile:1-labs
|
||
|
|
FROM ubuntu:22.04
|
||
|
|
# Sensitive
|
||
|
|
RUN --security=insecure ./example.sh
|
||
|
|
----
|
||
|
|
|
||
|
|
== Compliant Solution
|
||
|
|
|
||
|
|
[source,docker]
|
||
|
|
----
|
||
|
|
# syntax=docker/dockerfile:1-labs
|
||
|
|
FROM ubuntu:22.04
|
||
|
|
RUN ./example.sh
|
||
|
|
RUN --security=sandbox ./example.sh
|
||
|
|
----
|
||
|
|
|
||
|
|
include::../see.adoc[]
|
||
|
|
|
||
|
|
include::../implementation.adoc[]
|