fix(image): disable AVD-DS-0007 for history scanning

[nikpivkin]

Description

The AVD-DS-0007 check should only be applied to the final layer. This PR removes the recently added export of the etrypoint instruction to the Dockerfile and fixes a bug with exporting metadata instructions.

Related issues

• Close fix(checks): Only One Entrypoint false negative #8364

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[nikpivkin]

@simar7 Should we just disable the AVD-DS-0007 check when analyzing the image history like we did for #7368 ? Right now we have only one check that analyzes the entrypoint instruction but we may add more in the future.

[candrews]

Should we just disable the AVD-DS-0007 check when analyzing the image history like we did for #7368 ?

I think that's a great idea! 👍

[simar7]

@simar7 Should we just disable the AVD-DS-0007 check when analyzing the image history like we did for #7368 ? Right now we have only one check that analyzes the entrypoint instruction but we may add more in the future.

Yeah sounds good to me.

[DmitriyLewen]

LGTM.

@nikpivkin update PR title, please (change AVD-DS-0016 to AVD-DS-0007)

[nikpivkin]

@DmitriyLewen Good catch. I have also updated the commit message.