hadolint-2.9.2: src/Hadolint/Rule/DL3004.hs

module Hadolint.Rule.DL3004 (rule) where

import Hadolint.Rule
import Hadolint.Shell (ParsedShell, usingProgram)
import Language.Docker.Syntax (Instruction (..), RunArgs (..))


rule :: Rule ParsedShell
rule = dl3004 <> onbuild dl3004
{-# INLINEABLE rule #-}

dl3004 :: Rule ParsedShell
dl3004 = simpleRule code severity message check
  where
    code = "DL3004"
    severity = DLErrorC
    message =
      "Do not use sudo as it leads to unpredictable behavior. Use a tool like\
      \ gosu to enforce root"
    check (Run (RunArgs args _)) = foldArguments (not . usingProgram "sudo") args
    check _ = True
{-# INLINEABLE dl3004 #-}