BuildKit rules

# Violation: mixed casing
FROM alpine
run apk add curl
COPY . /app
cmd ["./app"]

# .dockerignore contains: *.log

# Violation: copying a file excluded by .dockerignore
COPY app.log /app/app.log

# Violation: two stages share the name "builder"
FROM alpine AS builder
RUN echo "first"

FROM ubuntu AS builder
RUN echo "second"

# Violation: host-port mapping in EXPOSE
EXPOSE 0.0.0.0:8080

# Violation: protocol in uppercase
EXPOSE 80/TCP
EXPOSE 443/UDP

# Violation: hardcoded platform instead of using build arg
FROM --platform=linux/amd64 alpine

# Violation: explicit platform conflicts with the target platform
FROM --platform=linux/arm64 node:20 AS builder

# Violation: ARG default is empty, making the image name invalid
ARG BASE_IMAGE=""
FROM ${BASE_IMAGE}

# Violation: shell form — PID 1 is /bin/sh, not the process
ENTRYPOINT myapp --config /etc/myapp.conf
CMD myapp

# Violation: legacy whitespace-separated ENV and LABEL syntax
ENV MY_VAR my_value
LABEL maintainer John Doe

FROM alpine
# Violation: two CMD instructions; only the last takes effect
CMD ["echo", "first"]
CMD ["echo", "second"]

# Violation: $TARGETPLATFORM is already the default
FROM --platform=$TARGETPLATFORM alpine

# Violation: "scratch" is a reserved stage name
FROM alpine AS scratch
RUN echo "building"

# Violation: secret value baked into the image layer
ARG AWS_SECRET_ACCESS_KEY
ENV DATABASE_PASSWORD=supersecret

# Violation: IMAGE_TAG is not declared before use in FROM
FROM alpine:${IMAGE_TAG}

FROM alpine
# Violation: $APP_DIR was never defined with ARG or ENV
COPY . $APP_DIR

FROM alpine
# Violation: relative path depends on the base image's CWD
WORKDIR app

# Violation: FROM is uppercase but AS is lowercase (or vice versa)
FROM alpine as builder
# or
from alpine AS builder

# Violation: comment does not match the stage name immediately below
# This is the production builder
FROM alpine AS builder

FROM alpine
# Violation: MAINTAINER is deprecated
MAINTAINER Jane Doe <jane@example.com>

FROM alpine
# Violation: trailing backslash on an otherwise empty continuation line
RUN echo "hello" \
    \
    && echo "world"

# Violation: stage name uses mixed or uppercase letters
FROM alpine AS Builder
FROM ubuntu AS PROD