test(core): harden the rule suite with realistic negative cases#18

Open

PunGrumpy wants to merge 13 commits into

mainfrom

advisor/006-realistic-negative-test-cases

Commits on Jul 22, 2026

test(cli): add fixture-driven integration tests for the published CLI
PunGrumpy
committed
fix(core): reset no-root-user tracking at each build stage
PunGrumpy
committed
fix(core): anchor secret keyword matching to segment boundaries
PunGrumpy
committed
fix(core): read the first non-flag operand in ADD/COPY source rules
PunGrumpy
committed
fix(core): reset order-layers tracking per stage, tighten src match
PunGrumpy
committed
chore(changeset): patch @docker-doctor/cli for rule-specificity fixes
PunGrumpy
committed

Commits on Jul 23, 2026