update Missing Flag From Dnf Install (#5310)

Checkmarx · May 5, 2022 · ea1d7dd · ea1d7dd
1 parent ca12c85
commit ea1d7dd
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/assets/queries/dockerfile/missing_flag_from_dnf_install/query.rego b/assets/queries/dockerfile/missing_flag_from_dnf_install/query.rego
@@ -37,5 +37,5 @@ hasInstallCommandWithoutFlag(command) = c {
 }
 
 hasYesFlag(command) {
-	regex.match("\\b(dnf *install (-y|-[\\D]{1}y|-y[\\D]{1}|-yes|--assumeyes))\\b [\\w\\W]*", command)
+	regex.match("\\b(microdnf|dnf *install (-y|-[\\D]{1}y|-y[\\D]{1}|-yes|--assumeyes))\\b [\\w\\W]*", command)
 }
diff --git a/assets/queries/dockerfile/missing_flag_from_dnf_install/test/negative3.dockerfile b/assets/queries/dockerfile/missing_flag_from_dnf_install/test/negative3.dockerfile
@@ -0,0 +1,5 @@
+FROM fedora:27
+RUN microdnf install -y \
+    openssl-libs-1:1.1.1k-6.el8_5.x86_64 \
+    zlib-1.2.11-18.el8_5.x86_64 \
+ && microdnf clean all