mcp-server-semgrep/semgrep-rules/dockerfile/best-practice/missing-zypper-clean.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: missing-zypper-clean
    severity: WARNING
    languages: [dockerfile]
    patterns:
      - pattern: RUN ... zypper $COMMAND ...
      - pattern-not-inside: RUN ... zypper clean
      - pattern-not-inside: RUN ... zypper clean
    message: >-
      This zypper command does not end with '&& zypper clean'. Running 'zypper clean' will remove cached data and reduce package size. (This must be performed in the same RUN step.)
    metadata:
      source-rule-url: https://github.com/hadolint/hadolint/wiki/DL3036
      references:
        - https://github.com/hadolint/hadolint/wiki/DL3036
      category: best-practice
      technology:
        - dockerfile