Merge pull request #170 from Chandan-DK/fix-chainsaw-tests

fix: update chainsaw tests violations messages

Author: anusha94

dockerfile-best-practices/check-apt-command-force-yes/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-apt-command-force-yes
                   error: ~
                   violations:
-                  - message: refrain from using the '--force-yes' option with `apt-get` as it bypasses important package validation checks and can potentially compromise the stability and security of your system.
+                  - message: refrain from using the '--force-yes' option with `apt-get` as it bypasses important package validation checks and can potentially compromise the stability and security of your system. (CHECK=spec.rules[0].assert.all[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -87,7 +87,7 @@ spec:
                     name: check-apt-command-force-yes
                   error: ~
                   violations:
-                  - message: refrain from using the '--force-yes' option with `apt` as it bypasses important package validation checks and can potentially compromise the stability and security of your system.
+                  - message: refrain from using the '--force-yes' option with `apt` as it bypasses important package validation checks and can potentially compromise the stability and security of your system. (CHECK=spec.rules[0].assert.all[1])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-authentication/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: detect-unauthenticated-flag
                   error: ~
                   violations:
-                  - message: Dockerfile contains the '--allow-unauthenticated' which is not preferred
+                  - message: Dockerfile contains the '--allow-unauthenticated' which is not preferred (CHECK=spec.rules[0].assert.any[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-certificate-validation-curl/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-certificate-validation-curl
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by not using `--insecure` option
+                  - message: Ensure certificate validation is enabled by not using `--insecure` option (CHECK=spec.rules[0].assert.any[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-certificate-validation-nodejs-env-var/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-certificate-validation-nodejs-env-var
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by using `NODE_TLS_REJECT_UNAUTHORIZED` env with value set to `1`
+                  - message: Ensure certificate validation is enabled by using `NODE_TLS_REJECT_UNAUTHORIZED` env with value set to `1` (CHECK=spec.rules[0].assert.any[0])
                     errors:
                     - type: FieldValueInvalid
                       value: false

dockerfile-best-practices/check-certificate-validation-pip3/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-certificate-validation-pip3
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by not using `--trusted-host` option with pip3
+                  - message: Ensure certificate validation is enabled by not using `--trusted-host` option with pip3 (CHECK=spec.rules[0].assert.all[1])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -86,7 +86,7 @@ spec:
                     name: check-certificate-validation-pip3
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by not using `--trusted-host` option with pip
+                  - message: Ensure certificate validation is enabled by not using `--trusted-host` option with pip (CHECK=spec.rules[0].assert.all[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-certificate-validation-python-env-var/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-certificate-validation-python-env-var
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by using `PYTHONHTTPSVERIFY` env with value set to `1`
+                  - message: Ensure certificate validation is enabled by using `PYTHONHTTPSVERIFY` env with value set to `1` (CHECK=spec.rules[0].assert.any[0])
                     errors:
                     - type: FieldValueInvalid
                       value: false

dockerfile-best-practices/check-certificate-validation-wget/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-certificate-validation-wget
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by not using `--no-check-certificate` option
+                  - message: Ensure certificate validation is enabled by not using `--no-check-certificate` option (CHECK=spec.rules[0].assert.any[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-missing-signature-options/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-missing-signature-options
                   error: ~
                   violations:
-                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--nodigest` flag
+                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--nodigest` flag (CHECK=spec.rules[0].assert.all[3])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -86,7 +86,7 @@ spec:
                     name: check-missing-signature-options
                   error: ~
                   violations:
-                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--nosignature` flag
+                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--nosignature` flag (CHECK=spec.rules[0].assert.all[2])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -119,7 +119,7 @@ spec:
                     name: check-missing-signature-options
                   error: ~
                   violations:
-                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--noverify` flag
+                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--noverify` flag (CHECK=spec.rules[0].assert.all[1])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -152,7 +152,7 @@ spec:
                     name: check-missing-signature-options
                   error: ~
                   violations:
-                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--nofiledigest` flag
+                  - message: Ensure that packages with untrusted or missing signatures are not used by rpm via `--nofiledigest` flag (CHECK=spec.rules[0].assert.all[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-nogpgcheck/test/chainsaw-test.yaml

@@ -109,7 +109,7 @@ spec:
                     name: check-nogpgcheck
                   error: ~
                   violations:
-                  - message: Enable GPG signature checking with yum by not using `--nogpgcheck` flag
+                  - message: Enable GPG signature checking with yum by not using `--nogpgcheck` flag (CHECK=spec.rules[0].assert.all[0])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -142,7 +142,7 @@ spec:
                     name: check-nogpgcheck
                   error: ~
                   violations:
-                  - message: Enable GPG signature checking with dnf by not using `--nogpgcheck` flag
+                  - message: Enable GPG signature checking with dnf by not using `--nogpgcheck` flag (CHECK=spec.rules[0].assert.all[1])
                     errors:
                     - type: FieldValueInvalid
                       value: true
@@ -175,7 +175,7 @@ spec:
                     name: check-nogpgcheck
                   error: ~
                   violations:
-                  - message: Enable GPG signature checking with tdnf by not using `--nogpgcheck` flag
+                  - message: Enable GPG signature checking with tdnf by not using `--nogpgcheck` flag (CHECK=spec.rules[0].assert.all[2])
                     errors:
                     - type: FieldValueInvalid
                       value: true

dockerfile-best-practices/check-npm-config-strict-ssl/test/chainsaw-test.yaml

@@ -53,7 +53,7 @@ spec:
                     name: check-npm-config-strict-ssl
                   error: ~
                   violations:
-                  - message: Ensure certificate validation is enabled by setting `NODE_TLS_REJECT_UNAUTHORIZED` env with value set to `true`
+                  - message: Ensure certificate validation is enabled by setting `NODE_TLS_REJECT_UNAUTHORIZED` env with value set to `true` (CHECK=spec.rules[0].assert.any[0])
                     errors:
                     - type: FieldValueInvalid
                       value: false