Dockerfile support

[Rchanger]

Adds: Docker as an IaC Provider.

• Scan support for Dockerfile.
• Support In file skip rules and resource prioritizing.

Result of scan with docker policies.

 % ./bin/terrascan scan -d integrations/atlantis -i docker -p /Users/suvarna/Desktop/docker  -o json
{
  "results": {
    "violations": [
      {
        "rule_name": "runWithSudo",
        "description": "Ensure to avoid RUN with sudo command",
        "rule_id": "AC_DOCKER_0007",
        "severity": "HIGH",
        "category": "Infrastructure Security",
        "resource_name": "Dockerfile",
        "resource_type": "docker_run",
        "file": "Dockerfile",
        "line": 5
      }
    ],
    "skipped_violations": null,
    "scan_summary": {
      "file/folder": "/Users/suvarna/go/src/github.com/rchanger/terrascan/pkg/iac-providers/docker/v1/testdata/valid-directory/Dockerfile",
      "iac_type": "docker",
      "scanned_at": "2021-07-30 16:52:38.000245 +0000 UTC",
      "policies_validated": 8,
      "violated_policies": 1,
      "low": 0,
      "medium": 0,
      "high": 1
    }
  }
}

[codecov]

Codecov Report

Merging #849 (32f6894) into master (aaacce2) will increase coverage by 0.28%.
The diff coverage is 96.59%.

@@            Coverage Diff             @@
##           master     #849      +/-   ##
==========================================
+ Coverage   78.81%   79.10%   +0.28%     
==========================================
  Files         216      220       +4     
  Lines        5272     5359      +87     
==========================================
+ Hits         4155     4239      +84     
- Misses        864      866       +2     
- Partials      253      254       +1     

Impacted Files	Coverage Δ
pkg/utils/skip_rules.go	93.33% <ø> (ø)
pkg/iac-providers/docker/v1/load-file.go	92.85% <92.85%> (ø)
pkg/iac-providers/docker.go	100.00% <100.00%> (ø)
pkg/iac-providers/docker/v1/load-dir.go	100.00% <100.00%> (ø)
pkg/iac-providers/docker/v1/parser.go	100.00% <100.00%> (ø)
pkg/runtime/executor.go	88.42% <100.00%> (ø)

[devang-gaur]

Please add a testfile demonstrating scan of a Dockerfile that includes multi-staging build

https://docs.docker.com/develop/develop-images/multistage-build/

[kanchwala-yusuf]

It is a request to be generous with comments. Ideally, a new contributor should be able to understand the code only from the comments.

[cesar-rodriguez]

Can we add a warning for when you specify the -i docker flag and no Dockerfiles were found?

[Rchanger]

Can we add a warning for when you specify the -i docker flag and no Dockerfiles were found?

Yes, added changes for warning

[Rchanger]

Please add a testfile demonstrating scan of a Dockerfile that includes multi-staging build

https://docs.docker.com/develop/develop-images/multistage-build/

This test case has been pushed, you can review that
Thanks

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

OBE