DRIVE: Dockerfile Rule Mining and Violation Detection

Zhou, Y. and Zhan, W. and Li, Z. and Han, Tingting and Chen, Taolue and Gall, H. (2023) DRIVE: Dockerfile Rule Mining and Violation Detection. ACM Transactions on Software Engineering and Methodology 33 (2), pp. 1-23. ISSN 1049-331X.

Abstract

A Dockerfile defines a set of instructions to build Docker images, which can then be instantiated to support containerized applications. Recent studies have revealed a considerable amount of quality issues with Dockerfiles. In this article, we propose a novel approach, Dockerfiles Rule mIning and Violation dEtection (DRIVE), to mine implicit rules and detect potential violations of such rules in Dockerfiles. DRIVE first parses Dockerfiles and transforms them to an intermediate representation. It then leverages an efficient sequential pattern mining algorithm to extract potential patterns. With heuristic-based reduction and moderate human intervention, potential rules are identified, which can then be utilized to detect potential violations of Dockerfiles. DRIVE identifies 34 semantic rules and 19 syntactic rules including 9 new semantic rules that have not been reported elsewhere. Extensive experiments on real-world Dockerfiles demonstrate the efficacy of our approach.

Metadata

Statistics

DownloadsShow export options

Export as XMLJSONCSV

Activity Overview

6 month trend

41Downloads

6 month trend

99Hits

Additional statistics are available via IRStats2.

Archive Staff Only (login required)

Edit/View Item