WEBVTT

00:00:02.440 --> 00:00:05.080
There are several methods with how to instruct Dockle

00:00:05.080 --> 00:00:07.560
to ignore specified checkpoints.

00:00:08.240 --> 00:00:10.550
You can specify program parameters,

00:00:11.340 --> 00:00:17.250
you can specify environment variables, and you can create a dockleignore file.

00:00:18.240 --> 00:00:20.960
Because we're using Dockle in a continuous integration

00:00:20.960 --> 00:00:24.260
environment, we're going to create a dockleignore file.

00:00:24.940 --> 00:00:26.560
So let's head back to the console.

00:00:28.040 --> 00:00:33.530
Let's create a file called dockleignore and only add the checkpoint that

00:00:33.530 --> 00:00:38.660
was a false positive, and the full name was CIS‑DI‑0010.

00:00:39.740 --> 00:00:42.260
So now, we created a dockleignore file.

00:00:43.040 --> 00:00:46.510
In order to add the file to the repository, we need to specify

00:00:46.510 --> 00:00:51.730
the parameter ‑‑force because all files starting with a dot are

00:00:51.730 --> 00:00:53.860
specified in the gitignore file.

00:00:54.940 --> 00:00:59.090
Now let's commit the file to the repository, again with a nice commit

00:00:59.090 --> 00:01:03.460
message, and push the changes upstream to our GitLab server.

00:01:05.239 --> 00:01:07.980
Let's switch to the web interface where GitLab picked up

00:01:07.980 --> 00:01:10.250
the change and is running a new pipeline.

00:01:11.040 --> 00:01:15.960
Let's click on the pipeline to see its details, and here you can see that

00:01:15.960 --> 00:01:21.530
the lint stage now succeeded. As expected, it read our dockleignore file,

00:01:21.670 --> 00:01:23.760
and the fatal message has now disappeared.

00:01:24.540 --> 00:01:25.760
Mission succeeded.

00:01:26.140 --> 00:01:30.340
We're now able to run Dockle in a continuous integration pipeline and

00:01:30.340 --> 00:01:33.550
are able to configure it to weed out false positives.

00:01:34.240 --> 00:01:38.470
What is up to you, of course, is go through each and any of the findings

00:01:38.650 --> 00:01:41.560
and see whether they are actually applicable or not.

00:01:42.540 --> 00:01:45.660
Let's summarize the use of Dockle in the next clip.