safeImages list in docker:S6471 rule not honored

SonarQube Server / Community Build
, ,
1

Hello

We lately updatet SonarQube Server to v2026.1 (119033) and a problem occur that we hadn’t noticed before. For docker rule S6471 This image might run with “root” as the default user. Make sure it is safe here, we have defined safelist of images.

However, this list does not work correctly, even though the image is included in the list, a hot spot is reported for this rule.

According to the documentation, I added this image with no tag do list:

<our_docker_host>:<custom_port>/<somepath>/dotnet/aspnet/8.0

But hotspot for dockerfile still reported:

FROM <our_docker_host>:<custom_port>/<somepath>/dotnet/aspnet/8.0:1.1.11 AS runtime

This image might run with "root" as the default user. Make sure it is safe here.
4

Hello @marcin.bebas ,

Thanks for the reporting.

We have reproduced the issue and created a ticket to make a fix for the rule.

Thanks,
Maksim Grebeniuk

7

That’s good news, thank you