mcp-server-semgrep/semgrep-rules/dockerfile/best-practice/prefer-apt-get.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: prefer-apt-get
    severity: INFO
    languages: [dockerfile]
    patterns:
      - pattern: RUN apt ...
      - pattern-not: RUN apt-get ...
    message: >-
      'apt-get' is preferred as an unattended tool for stability. 'apt' is discouraged.
    metadata:
      source-rule-url: https://github.com/hadolint/hadolint/wiki/DL3027
      references:
        - https://github.com/hadolint/hadolint/wiki/DL3027
      category: best-practice
      technology:
        - dockerfile