mcp-server-semgrep/semgrep-rules/generic/dockerfile/correctness/copy-from-own-alias.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
- id: copy-from-own-alias
  severity: ERROR
  languages: [generic]
  message: >-
    COPY instructions cannot copy from its own alias. The '$REF' alias is used before
    switching
    to a new image. If you meant to switch to a new image, include
    a new 'FROM' statement. Otherwise, remove the '--from=$REF' from the COPY statement.
  metadata:
    source-rule-url: https://github.com/hadolint/hadolint/wiki/DL3023
    references:
    - https://github.com/hadolint/hadolint/wiki/DL3023
    category: correctness
    technology:
    - dockerfile
  paths:
    include:
    - '*dockerfile*'
    - '*Dockerfile*'
  pattern-either:
  - pattern: |
      FROM $IMAGE:$TAG as $REF
      ...
      COPY --from=$REF
      ...
      FROM
  - pattern: |
      FROM $IMAGE:$TAG AS $REF
      ...
      COPY --from=$REF
      ...
      FROM