feat(mcp): Add semantic Docker query tools

[shivasurya]

Adds three semantic Docker MCP tools for advanced configuration filtering.

Stacked on: #531 (PR-01)

Tools Added

1. find_dockerfile_instructions - Semantic Dockerfile queries with instruction-specific filters
2. find_compose_services - Docker Compose service filtering
3. get_dockerfile_details - Complete Dockerfile breakdown with multi-stage analysis

Features

Semantic Filtering:

• Instruction-specific filters (has_digest, user, port, base_image)
• Service configuration filters (privileged, volumes, ports)
• Multi-stage build detection

Parsed Details:

• FROM: base_image, tag, digest, stage_alias
• USER: user, group
• EXPOSE: port, protocol
• COPY/ADD: source, destination, from_stage, chown
• Compose: image, build, ports, volumes, environment, privileged, network_mode

Examples

Find unpinned base images:

{"tool": "find_dockerfile_instructions", "arguments": {"instruction_type": "FROM", "has_digest": false}}

Find privileged containers:

{"tool": "find_compose_services", "arguments": {"has_privileged": true}}

Get complete Dockerfile breakdown:

{"tool": "get_dockerfile_details", "arguments": {"file_path": "/app/Dockerfile"}}

Testing

• 11 comprehensive test functions
• 100% test pass rate
• Clean linter

🤖 Generated with Claude Code

[safedep]

SafeDep Report Summary

No dependency changes detected. Nothing to scan.

_{This report is generated by SafeDep Github App}

[codecov]

Codecov Report

❌ Patch coverage is 87.71930% with 56 lines in your changes missing coverage. Please review.
✅ Project coverage is 82.87%. Comparing base (b3dad5b) to head (b51d043).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
sast-engine/mcp/tools.go	87.71%	46 Missing and 10 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #534      +/-   ##
==========================================
+ Coverage   82.75%   82.87%   +0.11%     
==========================================
  Files         133      133              
  Lines       15666    16102     +436     
==========================================
+ Hits        12965    13345     +380     
- Misses       2221     2267      +46     
- Partials      480      490      +10     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[shivasurya]

• feat(mcp): Add Docker dependency graph mapping #535
• feat(mcp): Add semantic Docker query tools #534 👈 (View in Graphite)
• feat(mcp): Add basic Docker MCP support #531
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.