fix(core): ignore option flags in FROM and COPY instruction parsing

.changeset/fix-from-copy-option-parsing.md

@@ -0,0 +1,5 @@
+---
+"@docker-doctor/cli": patch
+---
+
+Fix `FROM` and `COPY`/`ADD` instruction parsing in rules to correctly skip option flags (e.g. `--platform`, `--chown`), preventing false-positive diagnostics or layer ordering check failures.

packages/core/src/rules/image-size.ts

@@ -16,8 +16,9 @@ export const preferSlimBase: DockerfileRule = {
 
     for (const inst of instructions) {
       if (inst.instruction === "FROM") {
-        const [imagePart] = inst.args.split(/\s+/u);
-        if (imagePart === "scratch") {
+        const parts = inst.args.split(/\s+/u);
+        const imagePart = parts.find((p) => !p.startsWith("--"));
+        if (!imagePart || imagePart === "scratch") {
           continue;
         }
 

packages/core/src/rules/performance.ts

@@ -57,8 +57,11 @@ export const orderLayers: DockerfileRule = {
     for (const inst of instructions) {
       if (inst.instruction === "COPY" || inst.instruction === "ADD") {
         const parts = inst.args.split(/\s+/u);
-        // If copying the current directory (e.g., COPY . .)
-        const [src] = parts;
+        const src = parts.find((p) => !p.startsWith("--"));
+
+        if (!src) {
+          continue;
+        }
 
         if (
           (src === "." || src === "./" || src === "*" || src.includes("src")) &&

packages/core/src/rules/security.ts

@@ -113,9 +113,9 @@ export const pinImageVersion: DockerfileRule = {
         // FROM image or FROM image:tag or FROM image@sha256:hash
         // Also respect multi-stage builds (AS stageName)
         const parts = inst.args.split(/\s+/u);
-        const [imagePart] = parts;
+        const imagePart = parts.find((p) => !p.startsWith("--"));
 
-        if (imagePart === "scratch") {
+        if (!imagePart || imagePart === "scratch") {
           continue;
         }