diff --git a/policy/check-allow-untrusted-flag.yaml b/policy/check-allow-untrusted-flag.yaml index 1f73c10..2965103 100644 --- a/policy/check-allow-untrusted-flag.yaml +++ b/policy/check-allow-untrusted-flag.yaml @@ -17,7 +17,7 @@ spec: - (Stages[].Commands[?Name=='RUN'].CmdLine[][] | length(@) > `0`): true assert: any: - - message: Dockerfile contains the '--allow-untrusted' which is not preferred + - message: Dockerfile contains the '--allow-untrusted' which is not at all preferred check: ~.(Stages[].Commands[?Name=='RUN'].CmdLine[][]): - (contains(@, '--allow-untrusted') && (contains(@, 'apk'))): false \ No newline at end of file + (contains(@, '--allow-untrusted') && (contains(@, 'apk'))): false