dockerfile

type AddDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Chown        string `json:"chown"`
	Source       string `json:"source"`
	Destination  string `json:"destination"`
}

type ArgDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Argument     string `json:"argument"`
}

type AuditException struct {
	Message string
}

type CmdDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
}

type CopyDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Chown        string `json:"chown"`
	Source       string `json:"source"`
	Destination  string `json:"destination"`
}

type DfDirective interface {
	GetType() DockerfileDirectiveType
	Get() map[string]interface{}
}

type Dockerfile struct {
	Directives  []DfDirective
	Path        string
	Filename    string
	Maintainers []string
}

type DockerfileAuditor struct {
	Policy Policy
}

type DockerfileDirectiveType int

type DockerfileObject struct {
	From               string
	Platform           string
	Registry           string
	ImageName          string
	ImageTag           string
	Digest             string
	LocalName          string
	User               string
	RunCommands        []string
	LabelCommands      []string
	ExposeCommands     []string
	MaintainerCommands []string
	AddCommands        []string
	CopyCommands       []string
	EnvCommands        []string
	CmdCommands        []string
	EntrypointCommands []string
	WorkdirCommand     string
	VolumeCommands     []string
	ShellCommand       string
	StopsignalCommand  string
	ArgCommands        []string
	HealthcheckCommand string
	HealthcheckOptions string
}

type DockerfileVisitor struct {
	Dockerfile *Dockerfile
}

type EnforceRegistryPolicy struct {
	GenericPolicyRule
	AllowedRegistries []string
	Enabled           bool
}

type EntrypointDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
}

type EnvDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Variables    map[string]string `json:"variables"`
}

type ExposeDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Ports        []string `json:"ports"`
}

type ForbidInsecureRegistries struct {
	GenericPolicyRule
	Enabled bool
}

type ForbidPackages struct {
	ForbiddenPackages []string
	GenericPolicyRule
}

type ForbidPrivilegedPorts struct {
	GenericPolicyRule
	Enabled bool
}

type ForbidRoot struct {
	GenericPolicyRule
	Enabled bool
}

type ForbidSecrets struct {
	GenericPolicyRule
	// contains filtered or unexported fields
}

type ForbidTags struct {
	GenericPolicyRule
	ForbiddenTags []string
}

type FromDirective struct {
	Type           DockerfileDirectiveType `json:"type"`
	Content        string                  `json:"raw_content"`
	RunLastStage   []map[string]string
	Platform       string `json:"platform"`
	Registry       string `json:"registry"`
	ImageLocalName string `json:"local_name"`
	ImageTag       string `json:"tag"`
	ImageName      string `json:"image"`
}

type GenericPolicyRule struct {
	Type        PolicyRuleType
	TestResult  PolicyTestResult
	Description string
}

type HealthcheckDirective struct {
	Type    DockerfileDirectiveType `json:"type"`
	Content string                  `json:"raw_content"`
}

type LabelDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Labels       map[string]string `json:"labels"`
}

type MaintainerDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Maintainers  []string `json:"maintainers"`
}

type ParseResult struct {
	Filename    string                   `json:"filename"`
	Path        string                   `json:"path"`
	Maintainers string                   `json:"maintainers"`
	Directives  map[string][]DfDirective `json:"directives"`
}

type Policy struct {
	PolicyRules []PolicyRule
	PolicyFile  string
}

type PolicyResult struct {
	Filename     string
	Tests        []Rule
	AuditOutcome string
	Maintainers  string
	Path         string
}

type PolicyRule interface {
	GetType() PolicyRuleType
	Details() string
	Describe() string
	Test(directives map[string][]DfDirective) *[]Rule
}

type PolicyRuleType int

type PolicyTestResult struct {
	Results []Rule
}

type Rule struct {
	Type        PolicyRuleType `json:"Type"`
	Details     string         `json:"Details"`
	Mitigations string         `json:"Mitigations"`
	Statement   []string       `json:"Statement,omitempty"`
	Line        int            `json:"Line,omitempty"`
	Directive   string         `json:"Directive,omitempty"`
	Level       string         `json:"Level,omitempty"`
	Status      string         `json:"Status"` // 新增："pass" 或 "fail"
}

type RunDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
}

type ShellDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
}

type StopsignalDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Signal       string `json:"stopsignal"`
}

type UserDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	User         string `json:"user"`
	Group        string `json:"group"`
}

type VolumeDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
	Volumes      []string `json:"volumes"`
}

type WorkdirDirective struct {
	Type         DockerfileDirectiveType `json:"type"`
	Content      string                  `json:"raw_content"`
	RunLastStage []map[string]string
}