search

gbrindisi / dockerfile-security

A collection of OPA rules to statically analyze Dockerfiles to improve security
https://cloudberry.engineering/article/dockerfile-security-best-practices/
GNU General Public License v3.0
262 stars 91 forks source link

Add docker command to README #1

Closed mik-laj closed 4 years ago

mik-laj commented 4 years ago

Hello,

I wanted to test this product, but it is difficult without the Docker command, so I prepared it and want to contribute it.

Best regards, Kamil Breguła

gbrindisi commented 4 years ago

Hi! I appreciate the contribution but I think it's out of scope to explain here all the ways you can run conftest.

The link to the official docs will suffice.

mik-laj commented 4 years ago

@gbrindisi I don't want to explain all the methods, but one simplest and fastest method to try this project. In a project that supports the use of Docker, we can assume that users will have Docker, so running this one command is enough to check whether this project meets the users' requirements or not. This way, you do not need to know the project-specific installation procedure, but can simply run a command. The first thing I did when I found this project was to find a Docker image that would allow me to try this code. For this reason, I wanted to redeem this change. Other users who do not use conftest yet may have a similar experience.