DL3001.hs

module Hadolint.Rule.DL3001 (rule) where

import qualified Data.Set as Set
import Hadolint.Rule
import qualified Hadolint.Shell as Shell
import Language.Docker.Syntax (Instruction (..), RunArgs (..))


rule :: Rule Shell.ParsedShell
rule = dl3001 <> onbuild dl3001
{-# INLINEABLE rule #-}

dl3001 :: Rule Shell.ParsedShell
dl3001 = simpleRule code severity message check
  where
    code = "DL3001"
    severity = DLInfoC
    message =
      "For some bash commands it makes no sense running them in a Docker container like `ssh`, \
      \`vim`, `shutdown`, `service`, `ps`, `free`, `top`, `kill`, `mount`, `ifconfig`"

    check (Run (RunArgs args _)) = foldArguments hasInvalid args
    check _ = True

    hasInvalid args = null [arg | arg <- Shell.findCommandNames args, Set.member arg invalidCmds]
    invalidCmds =
      Set.fromList
        [ "free",
          "kill",
          "mount",
          "ps",
          "service",
          "shutdown",
          "ssh",
          "top",
          "vim"
        ]
{-# INLINEABLE dl3001 #-}