Great article Peter, thank you!
I've been looking for further information (and bending my mind to OPA) on what you explained for...
input[i].Cmd == "from"
... I understand input is an OPA reserved construct but how did you come to understand .Cmd in relation to Dockerfiles (or is it more OPA generic)? I've seen several docker examples that all leverage input[i].Cmd == but always assumed this was some Conftest special-sauce as an iterator for the commands within a Dockerfile.
Have you found a Conftest or OPA explaination that explains this?
Thanks again,
Ian
Great article Peter, thank you!
I've been looking for further information (and bending my mind to OPA) on what you explained for...
input[i].Cmd == "from"
... I understand input is an OPA reserved construct but how did you come to understand .Cmd in relation to Dockerfiles (or is it more OPA generic)? I've seen several docker examples that all leverage input[i].Cmd == but always assumed this was some Conftest special-sauce as an iterator for the commands within a Dockerfile.
Have you found a Conftest or OPA explaination that explains this?
Thanks again,
Ian
Aha, found that conftest parser for Dockerfile implements the .Cmd... case closed!