Class: Dependabot::Docker::FileParser

Inherits:
FileParsers::Base
  • Object
show all
Defined in:
lib/dependabot/docker/file_parser.rb

Constant Summary collapse

DOMAIN_COMPONENT =

Details of Docker regular expressions is at github.com/docker/distribution/blob/master/reference/regexp.go

/(?:[[:alnum:]]|[[:alnum:]][[[:alnum:]]-]*[[:alnum:]])/.freeze
DOMAIN = 
/(?:#{DOMAIN_COMPONENT}(?:\.#{DOMAIN_COMPONENT})+)/.freeze
REGISTRY = 
/(?<registry>#{DOMAIN}(?::\d+)?)/.freeze
NAME_COMPONENT = 
/(?:[a-z\d]+(?:(?:[._]|__|[-]*)[a-z\d]+)*)/.freeze
IMAGE = 
%r{(?<image>#{NAME_COMPONENT}(?:/#{NAME_COMPONENT})*)}.freeze
FROM = 
/FROM/i.freeze
PLATFORM = 
/--platform\=(?<platform>\S+)/.freeze
TAG = 
/:(?<tag>[\w][\w.-]{0,127})/.freeze
DIGEST = 
/@(?<digest>[^\s]+)/.freeze
NAME = 
/\s+AS\s+(?<name>[\w-]+)/.freeze
FROM_LINE = 
%r{^#{FROM}\s+(#{PLATFORM}\s+)?(#{REGISTRY}/)?
#{IMAGE}#{TAG}?#{DIGEST}?#{NAME}?}x.freeze
AWS_ECR_URL = 
/dkr\.ecr\.(?<region>[^.]+)\.amazonaws\.com/.freeze
IMAGE_SPEC = 
%r{^(#{REGISTRY}/)?#{IMAGE}#{TAG}?#{DIGEST}?#{NAME}?}x.freeze

Instance Method Summary collapse

Instance Method Details

#parse ⇒ Object 



40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
 
# File 'lib/dependabot/docker/file_parser.rb', line 40

def parse
  dependency_set = DependencySet.new

  dockerfiles.each do |dockerfile|
    dockerfile.content.each_line do |line|
      next unless FROM_LINE.match?(line)

      parsed_from_line = FROM_LINE.match(line).named_captures
      parsed_from_line["registry"] = nil if parsed_from_line["registry"] == "docker.io"

      version = version_from(parsed_from_line)
      next unless version

      dependency_set << Dependency.new(
        name: parsed_from_line.fetch("image"),
        version: version,
        package_manager: "docker",
        requirements: [
          requirement: nil,
          groups: [],
          file: dockerfile.name,
          source: source_from(parsed_from_line)
        ]
      )
    end
  end

  manifest_files.each do |file|
    dependency_set += workfile_file_dependencies(file)
  end

  dependency_set.dependencies
end