Description

This PR adds a concept of shared constraints.

A shared constraint is a kind of constraint that is shared among multiple patterns. For instance, in the following rule, a constraint with target: NAME behaves as if they are placed inside each pattern in patterns:

version: "1"
rules:
  - id: "use-trusted-base-images"
    language: dockerfile
    message: |
      Use trusted base images if possible.
    patterns:
      - pattern: FROM :[NAME]
      - pattern: FROM :[NAME] AS :[ALIAS]
      - pattern: FROM :[NAME]@:[HASH]
      - pattern: FROM :[NAME]@:[HASH] AS :[ALIAS]
      - pattern: FROM :[NAME]::[TAG]
      - pattern: FROM :[NAME]::[TAG] AS :[ALIAS]
      - pattern: FROM :[NAME]::[TAG]@:[HASH]
      - pattern: FROM :[NAME]::[TAG]@:[HASH] AS :[ALIAS]
    constraints:
      - target: NAME
        should: be-any-of
        strings:
          - test
          - foo

Checklist

• I opened a draft PR or added the [WIP] to the title if my PR is not ready for review.
• I have reviewed the code by myself.
• I have commented my code, particularly in hard-to-understand areas.
• I have made corresponding changes to the documentation.
• I have added tests enough to show how your code behaves and that your code works as expected.

Additional Notes

N/A