[Kanti]

Summary

The PHP images (php, php-apache, php-nginx and their -dev images) get the command file, which tells the type of a file; tools such as GrumPHP's BOM check call it. The Alpine images had none; in the Debian images it came with $PHPIZE_DEPS of the official image and is now installed explicitly. A serverspec test checks it in every PHP image, and AGENTS.md asks for such a test whenever a package is added.

Size

Only the 24 Alpine PHP images grow; the Debian images already had file.

• Download (compressed, amd64): +0.59 MB per image, +0.32 % on average (0.29–0.36 %)
• On disk: +10.9 MB per image, almost all of it magic.mgc; +1.7 % for php:8.x-alpine
• All 48 PHP images: +0.29 MB and +0.16 % on average

Changes

• template/Dockerfile/images/php.jinja2: file in official() and officialAlpine(); docker/php-official/*/Dockerfile regenerated with make provision
• tests/serverspec: misc::file runs file and checks that it tells a PHP script from a binary; collection::php includes it
• AGENTS.md: new section "Packages come with tests"
• docs/customization.md: file in "Tools for your Dockerfile"

How it was verified

• make provision, ci/console github:generate-ci and readme-banner:generate: only the eight php-official Dockerfiles change
• misc::file with serverspec.sh: passes on php:8.5, fails on the published php:8.5-alpine without file, passes with file installed
• The build of php-official/8.5-alpine installs file 5.47; file --mime-type works in the Alpine and Debian images

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud