Skip to content

Commit 40cd60a

Browse files
committed
Remove experimental status from DockerfileComponentDetector and update documentation
1 parent f8c809e commit 40cd60a

2 files changed

Lines changed: 1 addition & 4 deletions

File tree

docs/detectors/dockerfile.md

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,6 @@ Dockerfile detection depends on the following to successfully run:
66

77
- One or more Dockerfile files matching the patterns: `dockerfile`, `dockerfile.*`, or `*.dockerfile`
88

9-
The `DockerfileComponentDetector` is an **Experimental** detector. It runs automatically during scans, but its output is not included in the final scan results. To include its output, pass `--DetectorArgs DockerReference=Enable` (the key is the detector Id `DockerReference`, not the class name).
10-
119
## Detection strategy
1210

1311
The Dockerfile detector parses Dockerfile syntax to extract Docker image references from `FROM` and `COPY --from` instructions. It uses the [Valleysoft.DockerfileModel](https://github.com/mthalman/DockerfileModel) library to parse Dockerfile syntax.
@@ -32,7 +30,6 @@ The detector supports the full Docker reference grammar via `DockerReferenceUtil
3230

3331
## Known limitations
3432

35-
- **Experimental Status**: This detector runs automatically but its output is not included in scan results by default. To opt in, pass `--DetectorArgs DockerReference=Enable`
3633
- **Variable Resolution**: Image references containing unresolved Dockerfile `ARG` or `ENV` variables are not reported, which may lead to under-reporting in Dockerfiles that heavily use build-time variables
3734
- **No Version Pinning Validation**: The detector does not warn about unpinned image versions (e.g., `latest` tags), which are generally discouraged in production Dockerfiles
3835
- **Untagged Images Skipped**: Image references with neither a tag nor a digest (e.g. `FROM nginx`) are skipped because they cannot be uniquely identified

src/Microsoft.ComponentDetection.Detectors/dockerfile/DockerfileComponentDetector.cs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ namespace Microsoft.ComponentDetection.Detectors.Dockerfile;
1212
using Microsoft.Extensions.Logging;
1313
using Valleysoft.DockerfileModel;
1414

15-
public class DockerfileComponentDetector : FileComponentDetector, IExperimentalDetector
15+
public class DockerfileComponentDetector : FileComponentDetector
1616
{
1717
private readonly ICommandLineInvocationService commandLineInvocationService;
1818
private readonly IEnvironmentVariableService envVarService;

0 commit comments

Comments
 (0)