Property
Languageterraform
Severitymedium
Vulnerability Typeomission

Description#

Defining multiple HEALTHCHECK instructions within the same Dockerfile stage causes ambiguity, as only the last instruction is used and earlier ones are ignored. This can lead to unexpected container health behavior and misconfiguration.

Impact#

Ambiguous or incorrect HEALTHCHECK configuration may result in containers being marked as healthy or unhealthy incorrectly, which can disrupt automated orchestration, monitoring, and recovery processes, potentially leading to reduced availability or undetected service failures.

Resolution#

One HEALTHCHECK instruction must remain in Dockerfile. Remove all other instructions.