containerbuildsystem/atomic-reactor

Fail build when FROM line uses repository specified in 'name' label

Closed this issue · 1 comments

This sort of Dockerfile will always be invalid:

FROM foo/bar:anything
LABEL name=foo/bar
...

An image must not inherit from (some previous build of) itself.

Valid use-case: modifying an existing image to apply a CVE.