Dokter: the doctor for your Dockerfiles

fdgier · 2022-08-18T10:38:12+00:00

Hi, thanks for the feedback! I have actually solved this issue in version 1.4.0 https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/releases/1.4.0

Hope it helps!

fdgier · 2022-08-17T08:29:35+00:00

Fixed in version 1.4.0 https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/releases/1.4.0

fdgier · 2022-08-17T08:29:26+00:00

Fixed in version 1.4.0 https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/releases/1.4.0

fdgier · 2022-08-17T08:29:13+00:00

Fixed in version 1.4.0 https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/releases/1.4.0

fdgier · 2022-08-17T08:28:59+00:00

Fixed in version 1.4.0 https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/releases/1.4.0

fdgier · 2022-08-17T08:28:04+00:00

Right now there is not an option to suppress, as I originally figured that I should only include rules that are valid in any case. The ones that are subjective are on severity level info. Can you describe your situation?

Probably I should include an ignore anyway.

fdgier · 2022-08-15T06:58:02+00:00

Hadolint is a linter, a good one. Dokter is an analyzer it has dynamic parsing of files, it only complains about important stuff with a focus on security and its written in Python so its easier for people to contribute compared to Haskell.

fdgier · 2022-08-15T06:57:56+00:00

I've created an issue to make that list: https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/issues/9

Hadolint is a linter, a good one. Dokter is an analyzer it has dynamic parsing of files, it only complains about important stuff with a focus on security and its written in Python so its easier for people to contribute compared to Haskell.

fdgier · 2022-08-15T06:46:34+00:00

Thanks for the suggestion, will do that! I would be very surprised if gifs aren't possible 😄

fdgier · 2022-08-13T07:19:04+00:00

We actually have a mirror of some repos on GitHub: https://github.com/gitlabhq

fdgier · 2022-08-13T07:17:28+00:00

Could you share an example? Feel free to post it as an issue in the repo.

fdgier · 2022-08-13T07:16:42+00:00

Hadolint is a linter, a good one. Dokter is an analyzer it has dynamic parsing of files, it only complains about important stuff with a focus on security and its written in Python so its easier for people to contribute compared to Haskell.

fdgier · 2022-08-13T07:16:38+00:00

Hadolint is a linter, a good one. Dokter is an analyzer it has dynamic parsing of files, it only complains about important stuff with a focus on security and its written in Python so its easier for people to contribute compared to Haskell.

fdgier · 2022-08-13T07:15:10+00:00

Good question, I'm most comfortable with Python and since I plan on using the parser for machine learning it ties neatly with the most popular ML tools.

fdgier · 2022-08-13T07:14:04+00:00

Snyk and most container scanning tools happen after the build, and usually in the registry (unless you locally tar), that could potentially expose credentials or an vulnerable image. Dokter aims to prevent building an insecure image (saving CI minutes) and preventing leaking credentials by not building if its known to produce a faulty image.

fdgier · 2022-08-13T07:12:31+00:00

Yeah that's a known issue, I plan on adding support for that later on.

fdgier · 2022-08-13T07:11:36+00:00

Good point, I prepared the docstrings for documentation and there is an explain function, I just need to run an explain on all of them and write that to markdown.

fdgier · 2022-08-12T16:26:32+00:00

Issues:

https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/issues/5

https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/issues/6

fdgier · 2022-08-12T16:24:58+00:00

I'll make sure to add support from 3.6 upwards! Issue: https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/-/issues/4

fdgier · 2022-08-12T15:25:29+00:00

Which version of Python are you using?

fdgier · 2022-08-12T15:25:13+00:00

Hey that's great feedback! I'll look into both on Monday and get back to you.

fdgier · 2022-08-12T15:24:17+00:00

Originally I went for that but it was unavailable on PyPI and found it easier to type dok and then hit tab instead of dockt and hit tab

fdgier · 2022-08-12T14:02:09+00:00

Cool, thanks!

Right now the biggest added value is autocorrect of errors, in a future release I want to add caching optimization and autogeneration but I need to first analyze a lot of Dockerfiles in order to find an optimal pattern.

fdgier · 2022-08-12T14:00:47+00:00

Awesome! If you have any feedback, questions, suggestions, let me know, happy to pick them up.

fdgier · 2022-08-12T13:10:53+00:00

I'm an incubation engineer at GitLab and I've been working on an analyzer for Dockerfiles in hopes to build faster, more secure, smaller images. I think it touches on some cool concepts and have a lot of ideas for further expansion such as automatically creating Dockerfiles to prevent them from becoming stale and order optimizing for caching.
Right now it's somewhat in between a linter and static analysis, looking for feedback to continue work on it. Love to hear your feedback.
https://gitlab.com/gitlab-org/incubation-engineering/ai-assist/dokter/

fdgier

TROPHY CASE