False positive : php:8.1.X-alpine

[tomoyamachi]

Description

What did you expect to happen?

dockle php:8.1.3-fpm-alpine does not show CIS-DI-0010.

What happened instead?

$ dockle php:8.1.3-fpm-alpine
FATAL   - CIS-DI-0010: Do not store credential in environment variables/files
        * Suspicious ENV key found : access.log  on /bin/sh -c set -eux;        cd /usr/local/etc;      if [ -d php-fpm.d ]; then               sed 's!=NONE/!=!g' php-fpm.conf.default | tee php-fpm.conf > /dev/null;               cp php-fpm.d/www.conf.default php-fpm.d/www.conf;       else            mkdir php-fpm.d;              cp php-fpm.conf.default php-fpm.d/www.conf;             {                       echo '[global]';                        echo 'include=etc/php-fpm.d/*.conf';          } | tee php-fpm.conf;   fi;     {               echo '[global]';                echo 'error_log = /proc/self/fd/2';             echo; echo '; https://github.com/docker-library/php/pull/725#issuecomment-443540114'; echo 'log_limit = 8192';                echo;           echo '[www]';        echo '; if we send this to /proc/self/fd/1, it never appears';           echo 'access.log = /proc/self/fd/2';            echo;           echo 'clear_env = no';                echo;           echo '; Ensure worker stdout and stderr are sent to the main error log.';               echo 'catch_workers_output = yes';   echo 'decorate_workers_output = no';     } | tee php-fpm.d/docker.conf;  {               echo '[global]';                echo 'daemonize = no';          echo; echo '[www]';           echo 'listen = 9000';   } | tee php-fpm.d/zz-docker.conf (You can suppress it with --accept-key)
WARN    - CIS-DI-0001: Create a user for the container
        * Last user should not be root
INFO    - CIS-DI-0005: Enable Content trust for Docker
        * export DOCKER_CONTENT_TRUST=1 before docker pull/build
INFO    - CIS-DI-0006: Add HEALTHCHECK instruction to the container image
        * not found HEALTHCHECK statement

Output of run with -debug:

(paste your output here)

Output of dockle -v:

(paste your output here)

Additional details (base image name, container registry info...):