prompt: You will be provided with a partial code base and an issue statement explaining a problem to resolve.
  <issue>
  CKV_DOCKER_1 rule not failed when using EXPOSE 22/TCP
  **Issue**
  If it is related to an existing check, CKV_DOCKER_1.
  Dockerfile EXPOSE can accept port using tcp proto by defaut if not specified or you can also specify the protocol with /tcp or /udp.
  
  When using "EXPOSE 22/tcp" the rule does not detect the SSH port. something like '22/tcp'.split('/')[0] will return port without protocol or we can test both '22' or '22/tcp' in the rule.
  
  **Examples**
  Issue can be replicated with a Dockerfile which uses "EXPOSE 22/tcp".
  
  **Version**
   - Checkov Version 2.1.87
  
  **Specification**
  EXPOSE specification https://docs.docker.com/engine/reference/builder/#expose
  
  
  </issue>
  <code>
  [start of checkov/dockerfile/checks/ExposePort22.py]
  1 from __future__ import annotations
  2 
  3 from typing import TYPE_CHECKING
  4 
  5 from checkov.common.models.enums import CheckCategories, CheckResult
  6 from checkov.dockerfile.base_dockerfile_check import BaseDockerfileCheck
  7 
  8 if TYPE_CHECKING:
  9     from dockerfile_parse.parser import _Instruction
  10 
  11 
  12 class ExposePort22(BaseDockerfileCheck):
  13     def __init__(self) -> None:
  14         name = "Ensure port 22 is not exposed"
  15         id = "CKV_DOCKER_1"
  16         supported_instructions = ("EXPOSE",)
  17         categories = (CheckCategories.NETWORKING,)
  18         super().__init__(name=name, id=id, categories=categories, supported_instructions=supported_instructions)
  19 
  20     def scan_resource_conf(self, conf: list[_Instruction]) -> tuple[CheckResult, list[_Instruction] | None]:
  21         for expose in conf:
  22             if "22" in expose["value"].split(" "):
  23                 return CheckResult.FAILED, [expose]
  24 
  25         return CheckResult.PASSED, None
  26 
  27 
  28 check = ExposePort22()
  29
  [end of checkov/dockerfile/checks/ExposePort22.py]
  </code>
  
  I need you to solve this issue by generating a single patch file that I can apply directly to this repository using git apply. Please respond with a single patch file in the following format.
  <patch>
  diff --git a/file.py b/file.py
  --- a/file.py
  +++ b/file.py
  @@ -1,27 +1,35 @@
   def euclidean(a, b):
  -    while b:
  -        a, b = b, a % b
  -    return a
  +    if b == 0:
  +        return a
  +    return euclidean(b, a % b)
   
   
   def bresenham(x0, y0, x1, y1):
       points = []
       dx = abs(x1 - x0)
       dy = abs(y1 - y0)
  -    sx = 1 if x0 < x1 else -1
  -    sy = 1 if y0 < y1 else -1
  -    err = dx - dy
  +    x, y = x0, y0
  +    sx = -1 if x0 > x1 else 1
  +    sy = -1 if y0 > y1 else 1
   
  -    while True:
  -        points.append((x0, y0))
  -        if x0 == x1 and y0 == y1:
  -            break
  -        e2 = 2 * err
  -        if e2 > -dy:
  -            err -= dy
  -            x0 += sx
  -        if e2 < dx:
  -            err += dx
  -            y0 += sy
  +    if dx > dy:
  +        err = dx / 2.0
  +        while x != x1:
  +            points.append((x, y))
  +            err -= dy
  +            if err < 0:
  +                y += sy
  +                err += dx
  +            x += sx
  +    else:
  +        err = dy / 2.0
  +        while y != y1:
  +            points.append((x, y))
  +            err -= dx
  +            if err < 0:
  +                x += sx
  +                err += dy
  +            y += sy
  +
  +    points.append((x, y))
       return points
  
  </patch>
golden_diff: diff --git a/checkov/dockerfile/checks/ExposePort22.py b/checkov/dockerfile/checks/ExposePort22.py
  --- a/checkov/dockerfile/checks/ExposePort22.py
  +++ b/checkov/dockerfile/checks/ExposePort22.py
  @@ -19,7 +19,7 @@
   
       def scan_resource_conf(self, conf: list[_Instruction]) -> tuple[CheckResult, list[_Instruction] | None]:
           for expose in conf:
  -            if "22" in expose["value"].split(" "):
  +            if any(port in expose["value"].split(" ") for port in ("22", "22/tcp")):
                   return CheckResult.FAILED, [expose]
   
           return CheckResult.PASSED, None
  
verification_info: {"golden_diff": "diff --git a/checkov/dockerfile/checks/ExposePort22.py b/checkov/dockerfile/checks/ExposePort22.py\n--- a/checkov/dockerfile/checks/ExposePort22.py\n+++ b/checkov/dockerfile/checks/ExposePort22.py\n@@ -19,7 +19,7 @@\n \n     def scan_resource_conf(self, conf: list[_Instruction]) -> tuple[CheckResult, list[_Instruction] | None]:\n         for expose in conf:\n-            if \"22\" in expose[\"value\"].split(\" \"):\n+            if any(port in expose[\"value\"].split(\" \") for port in (\"22\", \"22/tcp\")):\n                 return CheckResult.FAILED, [expose]\n \n         return CheckResult.PASSED, None\n", "issue": "CKV_DOCKER_1 rule not failed when using EXPOSE 22/TCP\n**Issue**\r\nIf it is related to an existing check, CKV_DOCKER_1.\r\nDockerfile EXPOSE can accept port using tcp proto by defaut if not specified or you can also specify the protocol with /tcp or /udp.\r\n\r\nWhen using \"EXPOSE 22/tcp\" the rule does not detect the SSH port. something like '22/tcp'.split('/')[0] will return port without protocol or we can test both '22' or '22/tcp' in the rule.\r\n\r\n**Examples**\r\nIssue can be replicated with a Dockerfile which uses \"EXPOSE 22/tcp\".\r\n\r\n**Version**\r\n - Checkov Version 2.1.87\r\n\r\n**Specification**\r\nEXPOSE specification https://docs.docker.com/engine/reference/builder/#expose\r\n\n", "before_files": [{"content": "from __future__ import annotations\n\nfrom typing import TYPE_CHECKING\n\nfrom checkov.common.models.enums import CheckCategories, CheckResult\nfrom checkov.dockerfile.base_dockerfile_check import BaseDockerfileCheck\n\nif TYPE_CHECKING:\n    from dockerfile_parse.parser import _Instruction\n\n\nclass ExposePort22(BaseDockerfileCheck):\n    def __init__(self) -> None:\n        name = \"Ensure port 22 is not exposed\"\n        id = \"CKV_DOCKER_1\"\n        supported_instructions = (\"EXPOSE\",)\n        categories = (CheckCategories.NETWORKING,)\n        super().__init__(name=name, id=id, categories=categories, supported_instructions=supported_instructions)\n\n    def scan_resource_conf(self, conf: list[_Instruction]) -> tuple[CheckResult, list[_Instruction] | None]:\n        for expose in conf:\n            if \"22\" in expose[\"value\"].split(\" \"):\n                return CheckResult.FAILED, [expose]\n\n        return CheckResult.PASSED, None\n\n\ncheck = ExposePort22()\n", "path": "checkov/dockerfile/checks/ExposePort22.py"}]}