diff --git a/providers/os/resources/os.lr b/providers/os/resources/os.lr
index aa3b840298..637db1d18b 100644
--- a/providers/os/resources/os.lr
+++ b/providers/os/resources/os.lr
@@ -769,7 +769,7 @@ docker.file @defaults("file.path instructions.length stages.length") {
 }
 
 // Dockerfile stages
-docker.file.stage @defaults("from.name") {
+private docker.file.stage @defaults("from.name") {
   // The source of this stage, specified via `FROM` in Dockerfiles
   from docker.file.from
   // Contains the reference to the Dockerfile this stage belongs to
@@ -795,7 +795,7 @@ docker.file.stage @defaults("from.name") {
 }
 
 // Dockerfile USER instructions
-docker.file.user @defaults("user") {
+private docker.file.user @defaults("user") {
   // Set the user name or UID
   user string
   // Set the user group or GID (optional)
@@ -803,7 +803,7 @@ docker.file.user @defaults("user") {
 }
 
 // Dockerfile EXPOSE instruction
-docker.file.expose @defaults("port protocol") {
+private docker.file.expose @defaults("port protocol") {
   // Port that is exposed
   port int
   // Protocol that is exposed (evaluates to `tcp` if not specified)
@@ -811,7 +811,7 @@ docker.file.expose @defaults("port protocol") {
 }
 
 // Dockerfile FROM instructions
-docker.file.from @defaults("name image tag") {
+private docker.file.from @defaults("name image tag") {
   platform string
   image string
   tag string
@@ -820,12 +820,12 @@ docker.file.from @defaults("name image tag") {
 }
 
 // Dockerfile RUN instructions
-docker.file.run @defaults("script") {
+private docker.file.run @defaults("script") {
   script string
 }
 
 // Dockerfile ADD instructions
-docker.file.add @defaults("src dst") {
+private docker.file.add @defaults("src dst") {
   src []string
   dst string
   chown string
@@ -833,7 +833,7 @@ docker.file.add @defaults("src dst") {
 }
 
 // Dockerfile COPY instructions
-docker.file.copy @defaults("src dst") {
+private docker.file.copy @defaults("src dst") {
   // Optional source to copy file(s) from when not using the default build context
   src []string
   // The destination in the image for the file(s)
diff --git a/providers/os/resources/os.lr.manifest.yaml b/providers/os/resources/os.lr.manifest.yaml
index 0c3f69f852..ff842666a6 100644
--- a/providers/os/resources/os.lr.manifest.yaml
+++ b/providers/os/resources/os.lr.manifest.yaml
@@ -150,6 +150,7 @@ resources:
       chown: {}
       dst: {}
       src: {}
+    is_private: true
     min_mondoo_version: 9.0.0
     refs:
     - title: Dockerfile ADD reference
@@ -160,6 +161,7 @@ resources:
       chown: {}
       dst: {}
       src: {}
+    is_private: true
     min_mondoo_version: 9.0.0
     refs:
     - title: Dockerfile COPY reference
@@ -168,6 +170,7 @@ resources:
     fields:
       port: {}
       protocol: {}
+    is_private: true
     min_mondoo_version: 9.0.0
     refs:
     - title: Dockerfile EXPOSE reference
@@ -179,6 +182,7 @@ resources:
       name: {}
       platform: {}
       tag: {}
+    is_private: true
     min_mondoo_version: 9.0.0
     refs:
     - title: Dockerfile FROM reference
@@ -186,6 +190,7 @@ resources:
   docker.file.run:
     fields:
       script: {}
+    is_private: true
     min_mondoo_version: 9.0.0
     refs:
     - title: Dockerfile RUN reference
@@ -203,6 +208,7 @@ resources:
       labels: {}
       run: {}
       user: {}
+    is_private: true
     min_mondoo_version: 9.0.0
     refs:
     - title: Dockerfile Reference
@@ -213,6 +219,7 @@ resources:
     fields:
       group: {}
       user: {}
+    is_private: true
     min_mondoo_version: 9.0.0
   docker.image:
     fields: