Obey .dockerignore
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 454
- Forks
- 134
- PR merge metrics
- No merged PRs in 30d
Description
Docker Scout with fs://. should obey .dockerignore patterns when considering which SBOM directories and file paths to scan, and which to skip.
There should also be a command line flag like --exclude <pattern> [--exclude <pattern> [--exclude <pattern> ...]]] to supplement .dockerignore with additional patterns.
It's technically possible to workaround these gaps by through git and cp tricks, but A) computers exist to automate and B) many users are likely to fumble the manual steps involved. Please just do this as a built-in.
Most security and automation tools provide mechanisms to ignore file patterns.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the Docker Scout CLI handling for the fs://. scan source and trace how SBOM directories and file paths are selected. Review how .dockerignore patterns and repeated --exclude options should be incorporated, then verify that matching paths are skipped while other paths remain scanned.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100