Docker Base Image Security

Description

Detects base images using "latest" tag or missing version tags.

What Shoulder detects

Dockerfile uses {issue_type}: {image_reference}

How to fix

Use specific version tags for base images.

```dockerfile
FROM node:24-alpine
```

Learn more: https://shoulder.dev/learn/docker/cwe-1104/base-image-security

Applies to

Languages

🐳 Dockerfile

Frameworks

docker

References

Documentation ↗ OWASP ↗ Learn about CWE-1104

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=docker-base-image-security .