-
Notifications
You must be signed in to change notification settings - Fork 565
Closed
Labels
kind/bugSomething isn't workingSomething isn't working
Description
Describe the bug
Dockerfiles with here-docs crash the Pinned-Deps check
Reproduction steps
Run scorecard --checks Pinned-Dependencies --repo moby/moby
(also works with --repo distribution/distribution
)
Error: check runtime error: Pinned-Dependencies: internal error: error parsing shell code: Dockerfile:1:1: unclosed here-document 'EOT'
2023/07/31 16:52:39 error during command execution: check runtime error: Pinned-Dependencies: internal error: error parsing shell code: Dockerfile:1:1: unclosed here-document 'EOT'
moby/moby/Dockerfile
and distribution/distribution/dockerfiles/vendor.Dockerfile
have RUN
commands such as
RUN --mount=target=/context \
--mount=target=.,type=tmpfs \
--mount=target=/go/pkg/mod,type=cache <<EOT
set -e
rsync -a /context/. .
go mod tidy
go mod vendor
mkdir /out
cp -r go.mod go.sum vendor /out
EOT
Expected behavior
The Dockerfile should be correctly parsed.
kohtala and jkreileder
Metadata
Metadata
Assignees
Labels
kind/bugSomething isn't workingSomething isn't working