bashrs 6.66.0

Rust-to-Shell transpiler for deterministic bootstrap scripts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

//! DOCKER004: Invalid COPY --from reference (multi-stage build validation)

use crate::linter::{Diagnostic, LintResult, Severity, Span};
use std::collections::HashSet;

pub fn check(source: &str) -> LintResult {
    let mut result = LintResult::new();
    let stage_names = collect_stage_names(source);
    let diagnostics = validate_copy_from_references(source, &stage_names);

    for diag in diagnostics {
        result.add(diag);
    }

    result
}

/// Collect all stage names defined in FROM ... AS <name> directives
fn collect_stage_names(source: &str) -> HashSet<String> {
    let mut stage_names = HashSet::new();

    for line in source.lines() {
        if let Some(name) = parse_stage_name(line) {
            stage_names.insert(name);
        }
    }

    stage_names
}

/// Parse stage name from FROM ... AS <name> line
fn parse_stage_name(line: &str) -> Option<String> {
    let trimmed = line.trim();

    if trimmed.starts_with("FROM ") && trimmed.contains(" AS ") {
        if let Some(as_pos) = trimmed.rfind(" AS ") {
            let stage_name = trimmed[as_pos + 4..].trim();
            return Some(stage_name.to_string());
        }
    }

    None
}

/// Validate all COPY --from references and return diagnostics for invalid ones
fn validate_copy_from_references(source: &str, stage_names: &HashSet<String>) -> Vec<Diagnostic> {
    let mut diagnostics = Vec::new();

    for (line_num, line) in source.lines().enumerate() {
        if let Some(diag) = check_copy_from_line(line_num, line, stage_names) {
            diagnostics.push(diag);
        }
    }

    diagnostics
}

/// Check a single COPY --from line for valid stage reference
fn check_copy_from_line(
    line_num: usize,
    line: &str,
    stage_names: &HashSet<String>,
) -> Option<Diagnostic> {
    let trimmed = line.trim();

    if !trimmed.starts_with("COPY ") || !trimmed.contains("--from=") {
        return None;
    }

    let stage_ref = parse_copy_from_reference(trimmed)?;

    // Numeric indices (0, 1, 2...) are always valid
    if stage_ref.parse::<usize>().is_ok() {
        return None;
    }

    // Check if stage name exists
    if stage_names.contains(stage_ref) {
        return None;
    }

    // Invalid reference - create diagnostic
    let span = Span::new(line_num + 1, 1, line_num + 1, trimmed.len());
    Some(Diagnostic::new(
        "DOCKER004",
        Severity::Warning,
        format!(
            "Invalid COPY --from='{}' - stage not defined. Available stages: {:?}",
            stage_ref, stage_names
        ),
        span,
    ))
}

/// Parse stage reference from COPY --from=<reference> line
fn parse_copy_from_reference(line: &str) -> Option<&str> {
    let from_pos = line.find("--from=")?;
    let after_from = &line[from_pos + 7..];
    let stage_ref = after_from.split_whitespace().next().unwrap_or("");

    if stage_ref.is_empty() {
        None
    } else {
        Some(stage_ref)
    }
}