diff --git a/recipe_modules/artifacts/tests/full.expected/basic.json b/recipe_modules/artifacts/tests/full.expected/basic.json
index 4f9532e..3c85dcd 100644
--- a/recipe_modules/artifacts/tests/full.expected/basic.json
+++ b/recipe_modules/artifacts/tests/full.expected/basic.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/artifacts/tests/full.expected/build_cancelled.json b/recipe_modules/artifacts/tests/full.expected/build_cancelled.json
index 863d4b6..cf1ceca 100644
--- a/recipe_modules/artifacts/tests/full.expected/build_cancelled.json
+++ b/recipe_modules/artifacts/tests/full.expected/build_cancelled.json
@@ -628,6 +628,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -636,6 +637,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -722,6 +724,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -738,6 +742,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json b/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json
index 446f079..47f0420 100644
--- a/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json
+++ b/recipe_modules/artifacts/tests/full.expected/non_transient_failure.json
@@ -628,6 +628,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -636,6 +637,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -722,6 +724,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -738,6 +742,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/artifacts/tests/full.expected/timeout.json b/recipe_modules/artifacts/tests/full.expected/timeout.json
index eb7c820..7118144 100644
--- a/recipe_modules/artifacts/tests/full.expected/timeout.json
+++ b/recipe_modules/artifacts/tests/full.expected/timeout.json
@@ -628,6 +628,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -636,6 +637,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -722,6 +724,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -738,6 +742,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/artifacts/tests/full.expected/transient_failure.json b/recipe_modules/artifacts/tests/full.expected/transient_failure.json
index 8a68119..aadcb88 100644
--- a/recipe_modules/artifacts/tests/full.expected/transient_failure.json
+++ b/recipe_modules/artifacts/tests/full.expected/transient_failure.json
@@ -628,6 +628,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -636,6 +637,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -722,6 +724,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -738,6 +742,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/custom_toolchain.expected/default.json b/recipe_modules/build/tests/custom_toolchain.expected/default.json
index df89b6e..320e6c4 100644
--- a/recipe_modules/build/tests/custom_toolchain.expected/default.json
+++ b/recipe_modules/build/tests/custom_toolchain.expected/default.json
@@ -982,6 +982,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -990,6 +991,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1100,6 +1102,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1116,6 +1120,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/custom_toolchains.json b/recipe_modules/build/tests/full.expected/custom_toolchains.json
index 17f7803..7d658a8 100644
--- a/recipe_modules/build/tests/full.expected/custom_toolchains.json
+++ b/recipe_modules/build/tests/full.expected/custom_toolchains.json
@@ -625,6 +625,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -633,6 +634,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -741,6 +743,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -757,6 +761,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -1102,6 +1108,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1118,6 +1126,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/default.json b/recipe_modules/build/tests/full.expected/default.json
index 798b394..c031e83 100644
--- a/recipe_modules/build/tests/full.expected/default.json
+++ b/recipe_modules/build/tests/full.expected/default.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/default_cq.json b/recipe_modules/build/tests/full.expected/default_cq.json
index 1b94189..4d64b2a 100644
--- a/recipe_modules/build/tests/full.expected/default_cq.json
+++ b/recipe_modules/build/tests/full.expected/default_cq.json
@@ -578,6 +578,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -586,6 +587,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -694,6 +696,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -710,6 +714,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/duplicate_tool.json b/recipe_modules/build/tests/full.expected/duplicate_tool.json
index 0f648b5..13c51c3 100644
--- a/recipe_modules/build/tests/full.expected/duplicate_tool.json
+++ b/recipe_modules/build/tests/full.expected/duplicate_tool.json
@@ -379,6 +379,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -387,6 +388,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -495,6 +497,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -511,6 +515,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/extract_artifacts.json b/recipe_modules/build/tests/full.expected/extract_artifacts.json
index fbd63fa..9a73bb0 100644
--- a/recipe_modules/build/tests/full.expected/extract_artifacts.json
+++ b/recipe_modules/build/tests/full.expected/extract_artifacts.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_failure.json b/recipe_modules/build/tests/full.expected/fint_build_failure.json
index a03afe2..5d1a75f 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_failure.json
@@ -385,6 +385,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -393,6 +394,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -501,6 +503,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -517,6 +521,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_timeout.json b/recipe_modules/build/tests/full.expected/fint_build_timeout.json
index 58577c6..1b37490 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_timeout.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_timeout.json
@@ -379,6 +379,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -387,6 +388,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -495,6 +497,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -511,6 +515,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json b/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json
index 21af51a..ba5e18b 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_unexpected_failure_summary.json
@@ -384,6 +384,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -392,6 +393,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -500,6 +502,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -516,6 +520,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json b/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json
index b4fce1e..b2f4489 100644
--- a/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_build_unrecognized_failure.json
@@ -382,6 +382,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -390,6 +391,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -498,6 +500,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -514,6 +518,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_set_failure.json b/recipe_modules/build/tests/full.expected/fint_set_failure.json
index a920421..cbe5af7 100644
--- a/recipe_modules/build/tests/full.expected/fint_set_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_set_failure.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json b/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json
index c571716..d6ab157 100644
--- a/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json
+++ b/recipe_modules/build/tests/full.expected/fint_set_unexpected_failure_summary.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json b/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json
index 60c0d34..d90275b 100644
--- a/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json
+++ b/recipe_modules/build/tests/full.expected/fint_set_unrecognized_failure.json
@@ -379,6 +379,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -387,6 +388,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -495,6 +497,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -511,6 +515,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/generate_skipped_shards.json b/recipe_modules/build/tests/full.expected/generate_skipped_shards.json
index e043f7c..944f994 100644
--- a/recipe_modules/build/tests/full.expected/generate_skipped_shards.json
+++ b/recipe_modules/build/tests/full.expected/generate_skipped_shards.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/incremental_build.json b/recipe_modules/build/tests/full.expected/incremental_build.json
index 9fa4ec1..8b1b34f 100644
--- a/recipe_modules/build/tests/full.expected/incremental_build.json
+++ b/recipe_modules/build/tests/full.expected/incremental_build.json
@@ -441,6 +441,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -449,6 +450,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -557,6 +559,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -573,6 +577,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/ninjatrace_fails.json b/recipe_modules/build/tests/full.expected/ninjatrace_fails.json
index 23c77b0..8918781 100644
--- a/recipe_modules/build/tests/full.expected/ninjatrace_fails.json
+++ b/recipe_modules/build/tests/full.expected/ninjatrace_fails.json
@@ -382,6 +382,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -390,6 +391,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -498,6 +500,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -514,6 +518,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json b/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json
index b6f3567..27ed8b7 100644
--- a/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json
+++ b/recipe_modules/build/tests/full.expected/no_fint_build_artifacts.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json b/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json
index 2e440fe..63aaa4d 100644
--- a/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json
+++ b/recipe_modules/build/tests/full.expected/no_fint_set_artifacts.json
@@ -379,6 +379,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -387,6 +388,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -495,6 +497,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -511,6 +515,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json b/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json
index 04a5df1..50fc2c3 100644
--- a/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json
+++ b/recipe_modules/build/tests/full.expected/no_skip_for_integration_change.json
@@ -578,6 +578,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -586,6 +587,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -694,6 +696,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -710,6 +714,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json b/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json
index 76fad52..45dc54c 100644
--- a/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json
+++ b/recipe_modules/build/tests/full.expected/no_skip_if_recipe_testing_enabled.json
@@ -578,6 +578,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -586,6 +587,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -694,6 +696,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -710,6 +714,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/release_with_signature.json b/recipe_modules/build/tests/full.expected/release_with_signature.json
index 9dd225e..18e644d 100644
--- a/recipe_modules/build/tests/full.expected/release_with_signature.json
+++ b/recipe_modules/build/tests/full.expected/release_with_signature.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/release_with_version.json b/recipe_modules/build/tests/full.expected/release_with_version.json
index 82453f4..9f0772e 100644
--- a/recipe_modules/build/tests/full.expected/release_with_version.json
+++ b/recipe_modules/build/tests/full.expected/release_with_version.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json b/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json
index efd1a8b..1abdf13 100644
--- a/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json
+++ b/recipe_modules/build/tests/full.expected/size_creep_label_not_approved.json
@@ -578,6 +578,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -586,6 +587,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -694,6 +696,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -710,6 +714,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/skip_if_unaffected.json b/recipe_modules/build/tests/full.expected/skip_if_unaffected.json
index dc6604f..abe8da1 100644
--- a/recipe_modules/build/tests/full.expected/skip_if_unaffected.json
+++ b/recipe_modules/build/tests/full.expected/skip_if_unaffected.json
@@ -575,6 +575,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -583,6 +584,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -691,6 +693,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -707,6 +711,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/subbuild.json b/recipe_modules/build/tests/full.expected/subbuild.json
index aba6cb3..3996bd4 100644
--- a/recipe_modules/build/tests/full.expected/subbuild.json
+++ b/recipe_modules/build/tests/full.expected/subbuild.json
@@ -381,6 +381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -389,6 +390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -497,6 +499,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -513,6 +517,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json b/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json
index 00f7096..0af8a9d 100644
--- a/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json
+++ b/recipe_modules/build/tests/full.expected/upload_buildstats_failure.json
@@ -382,6 +382,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -390,6 +391,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -498,6 +500,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -514,6 +518,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/nsjail/api.py b/recipe_modules/nsjail/api.py
index 7e45de2..abae08f 100644
--- a/recipe_modules/nsjail/api.py
+++ b/recipe_modules/nsjail/api.py
@@ -164,6 +164,7 @@
             "egrep",
             "env",
             "expr",
+            "file",
             "find",
             "grep",
             "gzip",
@@ -172,6 +173,7 @@
             "ls",
             "mkdir",
             "mktemp",
+            "mv",
             "readlink",
             "rm",
             "sed",
diff --git a/recipe_modules/nsjail/tests/full.expected/default.json b/recipe_modules/nsjail/tests/full.expected/default.json
index cdc80ec..7fb7563 100644
--- a/recipe_modules/nsjail/tests/full.expected/default.json
+++ b/recipe_modules/nsjail/tests/full.expected/default.json
@@ -178,6 +178,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -186,6 +187,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -266,6 +268,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -282,6 +286,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/black.json b/recipe_modules/tricium_analyze/tests/full.expected/black.json
index e30d88e..b43cc98 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/black.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/black.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json
index dac9035..47aff8b 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_format.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json
index e6e491e..e58d767 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json
index 418d565..325c5ba 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_bad_offset.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json
index 51b558c..659b6a0 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/clang_tidy_error.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/cmc.json b/recipe_modules/tricium_analyze/tests/full.expected/cmc.json
index 38c787a..bda1dd2 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/cmc.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/cmc.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json b/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json
index df21d0f..9fdc801 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/dart_format.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json b/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json
index 56de11e..e269f14 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/fidl_format.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json b/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json
index cf1473f..b724e5a 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/fidl_lint.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json b/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json
index b1b80ae..1b3a0b1 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/gn_format.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json b/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json
index f9f3617..a8eaeb8 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/go_vet.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json
index ebfdb1c..3e61429 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_build_fails.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json
index 9903c21..a098411 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/go_vet_no_warnings.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json b/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json
index e6a32ef..25323ed 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/gofmt.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/json5.json b/recipe_modules/tricium_analyze/tests/full.expected/json5.json
index e94afe1..aac54cb 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/json5.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/json5.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json b/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json
index 24b887b..e5cd17d 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/mdlint.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json b/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json
index d710c94..320c67f 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/no_analysis.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json
index 7949e19..66fac05 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_message.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json
index 3014644..e65d0e6 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/no_commit_tag.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json b/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json
index 0f7a6e6..93c746a 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/non_inclusive_word.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json b/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json
index 58fc8f8..5e3ec77 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/rustfmt.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json b/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json
index e238524..e65ad27 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/staticlints.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json b/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json
index 472674e..b09c0d2 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/staticlints_failure.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json b/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json
index d710c94..320c67f 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/valid_commit_tag.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/yapf.json b/recipe_modules/tricium_analyze/tests/full.expected/yapf.json
index ae38fbd..44430e0 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/yapf.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/yapf.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json b/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json
index 869bf44..b3a0309 100644
--- a/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json
+++ b/recipe_modules/tricium_analyze/tests/full.expected/yapf_no_fx.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cobalt_config.expected/ci.json b/recipes/cobalt_config.expected/ci.json
index 12c9d68..2c71534 100644
--- a/recipes/cobalt_config.expected/ci.json
+++ b/recipes/cobalt_config.expected/ci.json
@@ -1069,6 +1069,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1077,6 +1078,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1187,6 +1189,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1203,6 +1207,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cobalt_config.expected/cq_try.json b/recipes/cobalt_config.expected/cq_try.json
index 59f79fa..262dcb9 100644
--- a/recipes/cobalt_config.expected/cq_try.json
+++ b/recipes/cobalt_config.expected/cq_try.json
@@ -1463,6 +1463,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1471,6 +1472,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1581,6 +1583,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1597,6 +1601,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json b/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json
index 1271905..5390b6b 100644
--- a/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json
+++ b/recipes/cobalt_config.expected/cq_try_not_cobalt_config.json
@@ -1463,6 +1463,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1471,6 +1472,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1581,6 +1583,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1597,6 +1601,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/clang_ml_training.expected/bootstrap.json b/recipes/contrib/clang_ml_training.expected/bootstrap.json
index 72aa33a..af7b739 100644
--- a/recipes/contrib/clang_ml_training.expected/bootstrap.json
+++ b/recipes/contrib/clang_ml_training.expected/bootstrap.json
@@ -7222,6 +7222,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -7230,6 +7231,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -7340,6 +7342,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -7356,6 +7360,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -9485,6 +9491,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -9501,6 +9509,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/clang_ml_training.expected/generate.json b/recipes/contrib/clang_ml_training.expected/generate.json
index b6bdb10..aeeabf3 100644
--- a/recipes/contrib/clang_ml_training.expected/generate.json
+++ b/recipes/contrib/clang_ml_training.expected/generate.json
@@ -3817,6 +3817,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -3825,6 +3826,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -3935,6 +3937,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -3951,6 +3955,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -5979,6 +5985,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -5995,6 +6003,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/docsgen.expected/dryrun.json b/recipes/contrib/docsgen.expected/dryrun.json
index 8348478..72b99a3 100644
--- a/recipes/contrib/docsgen.expected/dryrun.json
+++ b/recipes/contrib/docsgen.expected/dryrun.json
@@ -982,6 +982,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -990,6 +991,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1100,6 +1102,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1116,6 +1120,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/docsgen.expected/main.json b/recipes/contrib/docsgen.expected/main.json
index 0b5d725..cc15df9 100644
--- a/recipes/contrib/docsgen.expected/main.json
+++ b/recipes/contrib/docsgen.expected/main.json
@@ -982,6 +982,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -990,6 +991,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1100,6 +1102,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1116,6 +1120,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/docsgen.expected/release_branch.json b/recipes/contrib/docsgen.expected/release_branch.json
index 2d30723..24f2bc2 100644
--- a/recipes/contrib/docsgen.expected/release_branch.json
+++ b/recipes/contrib/docsgen.expected/release_branch.json
@@ -1026,6 +1026,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1034,6 +1035,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1144,6 +1146,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1160,6 +1164,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/ffmpeg.expected/cq.json b/recipes/contrib/ffmpeg.expected/cq.json
index 4f9b23a..591111f 100644
--- a/recipes/contrib/ffmpeg.expected/cq.json
+++ b/recipes/contrib/ffmpeg.expected/cq.json
@@ -1381,6 +1381,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1389,6 +1390,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1499,6 +1501,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1515,6 +1519,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -4278,6 +4284,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -4294,6 +4302,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/ffmpeg.expected/default.json b/recipes/contrib/ffmpeg.expected/default.json
index 480c39d..9951150 100644
--- a/recipes/contrib/ffmpeg.expected/default.json
+++ b/recipes/contrib/ffmpeg.expected/default.json
@@ -987,6 +987,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -995,6 +996,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1105,6 +1107,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1121,6 +1125,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -3868,6 +3874,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -3884,6 +3892,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/firebase_docs.expected/firebase_docs.json b/recipes/contrib/firebase_docs.expected/firebase_docs.json
index d4790e3..f2273f3 100644
--- a/recipes/contrib/firebase_docs.expected/firebase_docs.json
+++ b/recipes/contrib/firebase_docs.expected/firebase_docs.json
@@ -1659,6 +1659,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1667,6 +1668,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1777,6 +1779,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1793,6 +1797,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json b/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json
index 20610c8..3c6d96c 100644
--- a/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json
+++ b/recipes/contrib/firebase_docs.expected/firebase_docs_failing_rustdoc.json
@@ -1659,6 +1659,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1667,6 +1668,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1777,6 +1779,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1793,6 +1797,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/kythe.expected/basic.json b/recipes/contrib/kythe.expected/basic.json
index eee66f7..8ccf594 100644
--- a/recipes/contrib/kythe.expected/basic.json
+++ b/recipes/contrib/kythe.expected/basic.json
@@ -982,6 +982,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -990,6 +991,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1100,6 +1102,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1116,6 +1120,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/kythe.expected/try.json b/recipes/contrib/kythe.expected/try.json
index 45e19c2..558ff60 100644
--- a/recipes/contrib/kythe.expected/try.json
+++ b/recipes/contrib/kythe.expected/try.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/contrib/linux_sysroot.expected/basic.json b/recipes/contrib/linux_sysroot.expected/basic.json
index 1437159..81d8903 100644
--- a/recipes/contrib/linux_sysroot.expected/basic.json
+++ b/recipes/contrib/linux_sysroot.expected/basic.json
@@ -982,6 +982,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -990,6 +991,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1100,6 +1102,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1116,6 +1120,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cts_artifacts.expected/canary.json b/recipes/cts_artifacts.expected/canary.json
index 38781f5..7bd5662 100644
--- a/recipes/cts_artifacts.expected/canary.json
+++ b/recipes/cts_artifacts.expected/canary.json
@@ -945,6 +945,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -953,6 +954,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1063,6 +1065,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1079,6 +1083,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cts_artifacts.expected/ci.json b/recipes/cts_artifacts.expected/ci.json
index 22fbf48..bbd6c32 100644
--- a/recipes/cts_artifacts.expected/ci.json
+++ b/recipes/cts_artifacts.expected/ci.json
@@ -982,6 +982,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -990,6 +991,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1100,6 +1102,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1116,6 +1120,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cts_artifacts.expected/cq.json b/recipes/cts_artifacts.expected/cq.json
index 1ce9a95..d69a2d9 100644
--- a/recipes/cts_artifacts.expected/cq.json
+++ b/recipes/cts_artifacts.expected/cq.json
@@ -1376,6 +1376,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1384,6 +1385,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1494,6 +1496,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1510,6 +1514,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/cts_artifacts.expected/milestone.json b/recipes/cts_artifacts.expected/milestone.json
index 815a367..b555561 100644
--- a/recipes/cts_artifacts.expected/milestone.json
+++ b/recipes/cts_artifacts.expected/milestone.json
@@ -945,6 +945,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -953,6 +954,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1063,6 +1065,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1079,6 +1083,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/affected_tests_no_work.json b/recipes/fuchsia/build.expected/affected_tests_no_work.json
index 6b63a7b..402ca12 100644
--- a/recipes/fuchsia/build.expected/affected_tests_no_work.json
+++ b/recipes/fuchsia/build.expected/affected_tests_no_work.json
@@ -1787,6 +1787,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1795,6 +1796,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1905,6 +1907,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1921,6 +1925,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json b/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json
index f495738..85c75ad 100644
--- a/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json
+++ b/recipes/fuchsia/build.expected/catapult_dashboard_upload_enabled.json
@@ -1350,6 +1350,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1358,6 +1359,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1468,6 +1470,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1484,6 +1488,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/collect_absolute_coverage.json b/recipes/fuchsia/build.expected/collect_absolute_coverage.json
index 3c0873e..6cb6878 100644
--- a/recipes/fuchsia/build.expected/collect_absolute_coverage.json
+++ b/recipes/fuchsia/build.expected/collect_absolute_coverage.json
@@ -1781,6 +1781,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1789,6 +1790,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1899,6 +1901,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1915,6 +1919,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/collect_selective_coverage.json b/recipes/fuchsia/build.expected/collect_selective_coverage.json
index 5b9d56e..147b499 100644
--- a/recipes/fuchsia/build.expected/collect_selective_coverage.json
+++ b/recipes/fuchsia/build.expected/collect_selective_coverage.json
@@ -1781,6 +1781,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1789,6 +1790,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1899,6 +1901,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1915,6 +1919,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/cq_perfcompare.json b/recipes/fuchsia/build.expected/cq_perfcompare.json
index 2251d88..92b9ce0 100644
--- a/recipes/fuchsia/build.expected/cq_perfcompare.json
+++ b/recipes/fuchsia/build.expected/cq_perfcompare.json
@@ -1803,6 +1803,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1811,6 +1812,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1921,6 +1923,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1937,6 +1941,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -5635,6 +5641,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -5651,6 +5659,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/default.json b/recipes/fuchsia/build.expected/default.json
index 3ec36b0..59735f3 100644
--- a/recipes/fuchsia/build.expected/default.json
+++ b/recipes/fuchsia/build.expected/default.json
@@ -1348,6 +1348,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1356,6 +1357,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1466,6 +1468,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1482,6 +1486,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/default_cq.json b/recipes/fuchsia/build.expected/default_cq.json
index bfbbfa1..ba3e353 100644
--- a/recipes/fuchsia/build.expected/default_cq.json
+++ b/recipes/fuchsia/build.expected/default_cq.json
@@ -1792,6 +1792,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1800,6 +1801,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1910,6 +1912,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1926,6 +1930,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json b/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json
index f20ba81..eb970ff 100644
--- a/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json
+++ b/recipes/fuchsia/build.expected/default_cq_no_affected_retry_task_on_test_failure.json
@@ -1789,6 +1789,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1797,6 +1798,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1907,6 +1909,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1923,6 +1927,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/default_multipliers.json b/recipes/fuchsia/build.expected/default_multipliers.json
index 9c3e3e2..5097489 100644
--- a/recipes/fuchsia/build.expected/default_multipliers.json
+++ b/recipes/fuchsia/build.expected/default_multipliers.json
@@ -1888,6 +1888,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1896,6 +1897,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -2006,6 +2008,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -2022,6 +2026,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/failed_build_cq.json b/recipes/fuchsia/build.expected/failed_build_cq.json
index 0ddcc32..73119a5 100644
--- a/recipes/fuchsia/build.expected/failed_build_cq.json
+++ b/recipes/fuchsia/build.expected/failed_build_cq.json
@@ -1778,6 +1778,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1786,6 +1787,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1896,6 +1898,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1912,6 +1916,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/non_numeric_parent_id.json b/recipes/fuchsia/build.expected/non_numeric_parent_id.json
index 1a7748b..ca1769e 100644
--- a/recipes/fuchsia/build.expected/non_numeric_parent_id.json
+++ b/recipes/fuchsia/build.expected/non_numeric_parent_id.json
@@ -1348,6 +1348,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1356,6 +1357,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1466,6 +1468,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1482,6 +1486,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/run_all_tests.json b/recipes/fuchsia/build.expected/run_all_tests.json
index a49fde1..d415b92 100644
--- a/recipes/fuchsia/build.expected/run_all_tests.json
+++ b/recipes/fuchsia/build.expected/run_all_tests.json
@@ -1879,6 +1879,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1887,6 +1888,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1997,6 +1999,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -2013,6 +2017,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/sdk.json b/recipes/fuchsia/build.expected/sdk.json
index 0e41e55..ed1ec92 100644
--- a/recipes/fuchsia/build.expected/sdk.json
+++ b/recipes/fuchsia/build.expected/sdk.json
@@ -1378,6 +1378,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1386,6 +1387,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1496,6 +1498,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1512,6 +1516,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/skip_if_unaffected.json b/recipes/fuchsia/build.expected/skip_if_unaffected.json
index 62866e9..9835c95 100644
--- a/recipes/fuchsia/build.expected/skip_if_unaffected.json
+++ b/recipes/fuchsia/build.expected/skip_if_unaffected.json
@@ -1785,6 +1785,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1793,6 +1794,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1903,6 +1905,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1919,6 +1923,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/build.expected/test_on_gce.json b/recipes/fuchsia/build.expected/test_on_gce.json
index e35bb77..04d924e 100644
--- a/recipes/fuchsia/build.expected/test_on_gce.json
+++ b/recipes/fuchsia/build.expected/test_on_gce.json
@@ -1270,6 +1270,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1278,6 +1279,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1386,6 +1388,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1402,6 +1406,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/determinism_check.expected/deterministic_build.json b/recipes/fuchsia/determinism_check.expected/deterministic_build.json
index e0a2e0e..3362156 100644
--- a/recipes/fuchsia/determinism_check.expected/deterministic_build.json
+++ b/recipes/fuchsia/determinism_check.expected/deterministic_build.json
@@ -987,6 +987,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -995,6 +996,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1105,6 +1107,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1121,6 +1125,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -3156,6 +3162,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -3172,6 +3180,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/determinism_check.expected/different_hashes.json b/recipes/fuchsia/determinism_check.expected/different_hashes.json
index 68b8637..adf1e5d 100644
--- a/recipes/fuchsia/determinism_check.expected/different_hashes.json
+++ b/recipes/fuchsia/determinism_check.expected/different_hashes.json
@@ -987,6 +987,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -995,6 +996,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1105,6 +1107,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1121,6 +1125,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -3156,6 +3162,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -3172,6 +3180,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json b/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json
index 6cefaa5..9614b79 100644
--- a/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json
+++ b/recipes/fuchsia/determinism_check.expected/different_number_of_blobs.json
@@ -987,6 +987,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -995,6 +996,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1105,6 +1107,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1121,6 +1125,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
@@ -3151,6 +3157,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -3167,6 +3175,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/prebuilt_host_tool.expected/ci.json b/recipes/prebuilt_host_tool.expected/ci.json
index 2aeb9e7..a2b2f21 100644
--- a/recipes/prebuilt_host_tool.expected/ci.json
+++ b/recipes/prebuilt_host_tool.expected/ci.json
@@ -921,6 +921,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -929,6 +930,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1039,6 +1041,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1055,6 +1059,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/prebuilt_host_tool.expected/cq.json b/recipes/prebuilt_host_tool.expected/cq.json
index 223c1eb..3ab1b07 100644
--- a/recipes/prebuilt_host_tool.expected/cq.json
+++ b/recipes/prebuilt_host_tool.expected/cq.json
@@ -1469,6 +1469,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1477,6 +1478,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1587,6 +1589,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1603,6 +1607,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/release/platform_version_roller.expected/roll.json b/recipes/release/platform_version_roller.expected/roll.json
index 8a4e4ac..9df7d0c 100644
--- a/recipes/release/platform_version_roller.expected/roll.json
+++ b/recipes/release/platform_version_roller.expected/roll.json
@@ -1032,6 +1032,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1040,6 +1041,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1126,6 +1128,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1142,6 +1146,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/default_ci.json b/recipes/static_checks.expected/default_ci.json
index dfa6501..ad6e788 100644
--- a/recipes/static_checks.expected/default_ci.json
+++ b/recipes/static_checks.expected/default_ci.json
@@ -995,6 +995,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1003,6 +1004,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1113,6 +1115,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1129,6 +1133,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/default_cq.json b/recipes/static_checks.expected/default_cq.json
index 613d061..8d32ddc 100644
--- a/recipes/static_checks.expected/default_cq.json
+++ b/recipes/static_checks.expected/default_cq.json
@@ -1389,6 +1389,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1397,6 +1398,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1507,6 +1509,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1523,6 +1527,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/doc_checker_override.json b/recipes/static_checks.expected/doc_checker_override.json
index c2178a5..0906294 100644
--- a/recipes/static_checks.expected/doc_checker_override.json
+++ b/recipes/static_checks.expected/doc_checker_override.json
@@ -1389,6 +1389,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1397,6 +1398,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1507,6 +1509,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1523,6 +1527,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/failed_build.json b/recipes/static_checks.expected/failed_build.json
index 6124a74..1ec8f1b 100644
--- a/recipes/static_checks.expected/failed_build.json
+++ b/recipes/static_checks.expected/failed_build.json
@@ -1390,6 +1390,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1398,6 +1399,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1508,6 +1510,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1524,6 +1528,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/failed_doc_check.json b/recipes/static_checks.expected/failed_doc_check.json
index 0caa3c0..386ff3d 100644
--- a/recipes/static_checks.expected/failed_doc_check.json
+++ b/recipes/static_checks.expected/failed_doc_check.json
@@ -1389,6 +1389,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1397,6 +1398,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1507,6 +1509,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1523,6 +1527,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/failed_gn_format.json b/recipes/static_checks.expected/failed_gn_format.json
index c427085..b0cdfec 100644
--- a/recipes/static_checks.expected/failed_gn_format.json
+++ b/recipes/static_checks.expected/failed_gn_format.json
@@ -1389,6 +1389,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1397,6 +1398,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1507,6 +1509,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1523,6 +1527,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/static_checks.expected/failed_licenses_check.json b/recipes/static_checks.expected/failed_licenses_check.json
index c023b6b..1a010c1 100644
--- a/recipes/static_checks.expected/failed_licenses_check.json
+++ b/recipes/static_checks.expected/failed_licenses_check.json
@@ -1389,6 +1389,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1397,6 +1398,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1507,6 +1509,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1523,6 +1527,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/tricium/tricium.expected/attribute_disable.json b/recipes/tricium/tricium.expected/attribute_disable.json
index a59daf3..991c359 100644
--- a/recipes/tricium/tricium.expected/attribute_disable.json
+++ b/recipes/tricium/tricium.expected/attribute_disable.json
@@ -1477,6 +1477,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1485,6 +1486,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1595,6 +1597,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1611,6 +1615,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/tricium/tricium.expected/default.json b/recipes/tricium/tricium.expected/default.json
index d739e19..563e4d0 100644
--- a/recipes/tricium/tricium.expected/default.json
+++ b/recipes/tricium/tricium.expected/default.json
@@ -1657,6 +1657,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1665,6 +1666,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1775,6 +1777,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1791,6 +1795,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",
diff --git a/recipes/tricium/tricium.expected/one_analysis_fails.json b/recipes/tricium/tricium.expected/one_analysis_fails.json
index 5513f27..e6e9a40 100644
--- a/recipes/tricium/tricium.expected/one_analysis_fails.json
+++ b/recipes/tricium/tricium.expected/one_analysis_fails.json
@@ -1477,6 +1477,7 @@
       "egrep",
       "env",
       "expr",
+      "file",
       "find",
       "grep",
       "gzip",
@@ -1485,6 +1486,7 @@
       "ls",
       "mkdir",
       "mktemp",
+      "mv",
       "readlink",
       "rm",
       "sed",
@@ -1595,6 +1597,8 @@
       "--bindmount_ro",
       "/usr/bin/expr",
       "--bindmount_ro",
+      "/usr/bin/file",
+      "--bindmount_ro",
       "/usr/bin/find",
       "--bindmount_ro",
       "/usr/bin/grep",
@@ -1611,6 +1615,8 @@
       "--bindmount_ro",
       "/usr/bin/mktemp",
       "--bindmount_ro",
+      "/usr/bin/mv",
+      "--bindmount_ro",
       "/usr/bin/openssl",
       "--bindmount_ro",
       "/usr/bin/readlink",