Back to Checks
image

Deprecated MAINTAINER used

image_DS-0022
Service: dockerSeverity: high
OfficialBuilt-inVerified

MAINTAINER has been deprecated since Docker 1.13.0.

Prowler logoProwlerprowler-provider-image

Run this check with Prowler

Run in Prowler Cloud
Run
prowler image --checks image_DS-0022

Recommendation

Use LABEL instead of MAINTAINER

Check Code

# METADATA
# title: "Deprecated MAINTAINER used"
# description: "MAINTAINER has been deprecated since Docker 1.13.0."
# scope: package
# schemas:
# - input: schema["dockerfile"]
# related_resources:
# - https://docs.docker.com/engine/deprecated/#maintainer-in-dockerfile
# custom:
#   id: DS-0022
#   long_id: docker-no-maintainer
#   aliases:
#     - AVD-DS-0022
#     - DS022
#     - no-maintainer
#     - docker-no-maintainer
#   severity: HIGH
#   recommended_action: "Use LABEL instead of MAINTAINER"
#   input:
#     selector:
#     - type: dockerfile
#   examples: checks/docker/maintainer_is_deprecated.yaml
package builtin.dockerfile.DS022

import rego.v1

get_maintainer contains mntnr if {
	mntnr := input.Stages[_].Commands[_]
	mntnr.Cmd == "maintainer"
}

deny contains res if {
	mntnr := get_maintainer[_]
	msg := sprintf("MAINTAINER should not be used: 'MAINTAINER %s'", [mntnr.Value[0]])
	res := result.new(msg, mntnr)
}

References