mcp-server-semgrep/semgrep-rules/yaml/docker-compose/security/no-new-privileges.test.yaml

MCP Server for Semgrep Integration - static code analysis with AI

version: "3.9"
services:
  # ruleid: no-new-privileges
  web:
    image: nginx:alpine
  # ruleid: no-new-privileges
  worker:
    image: my-worker-image:latest
    security_opt:
      - label:user:testuser
  # ok: no-new-privileges
  db:
    image: mysql
    security_opt:
      - no-new-privileges:true
      - another-opt:true