From e4e21fda0255d8de73d29c4c9c4664a9dcf7daca Mon Sep 17 00:00:00 2001 From: Krish Bajaj <168710331+krishbajaj1609@users.noreply.github.com> Date: Tue, 3 Mar 2026 18:14:57 +0530 Subject: [PATCH] Update warning message for untrusted flag in Dockerfile --- policy/check-allow-untrusted-flag.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/check-allow-untrusted-flag.yaml b/policy/check-allow-untrusted-flag.yaml index 1f73c10..2965103 100644 --- a/policy/check-allow-untrusted-flag.yaml +++ b/policy/check-allow-untrusted-flag.yaml @@ -17,7 +17,7 @@ spec: - (Stages[].Commands[?Name=='RUN'].CmdLine[][] | length(@) > `0`): true assert: any: - - message: Dockerfile contains the '--allow-untrusted' which is not preferred + - message: Dockerfile contains the '--allow-untrusted' which is not at all preferred check: ~.(Stages[].Commands[?Name=='RUN'].CmdLine[][]): - (contains(@, '--allow-untrusted') && (contains(@, 'apk'))): false \ No newline at end of file + (contains(@, '--allow-untrusted') && (contains(@, 'apk'))): false