Skip to content

added a check for the absence of a tag at all in dockerfile-deny-latest-image-policy#421

Open
ya-makariy wants to merge 1 commit into
kyverno:mainfrom
ya-makariy:update-dockerfile-deny-latest-image-policy
Open

added a check for the absence of a tag at all in dockerfile-deny-latest-image-policy#421
ya-makariy wants to merge 1 commit into
kyverno:mainfrom
ya-makariy:update-dockerfile-deny-latest-image-policy

Conversation

@ya-makariy

@ya-makariy ya-makariy commented Jul 8, 2024

Copy link
Copy Markdown

Explanation

The policy lacked a rule to check for the absence of a tag at all
As written in the docker documentation:

The tag or digest values are optional. If you omit either of them, the builder assumes a latest tag by default. The builder returns an error if it can't find the tag value.

Related issue

Milestone of this PR

What type of PR is this

Proposed Changes

Proof Manifests

Checklist

  • I have read the contributing guidelines.
  • I have read the PR documentation guide and followed the process including adding proof manifests to this PR.
  • This is a bug fix and I have added unit tests that prove my fix is effective.
  • This is a feature and I have added CLI tests that are applicable.
  • My PR needs to be cherry picked to a specific release branch which is .

Further Comments

Signed-off-by: Makarii Balashov <me@ya-makariy.com>
@ya-makariy ya-makariy force-pushed the update-dockerfile-deny-latest-image-policy branch from eb3a86b to c8f6110 Compare July 8, 2024 16:58
@ya-makariy

Copy link
Copy Markdown
Author

Hi, @eddycharly. Any updates on this PR?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant