-
**Is this a BUG REPORT or FEATURE REQUEST? (leave only one on its own line)**
/kind bug
**Description**
I want to be able to tag an oci archive multiple times (similar to the results of `podm…
-
{
"hub-mirror": [
"gcr.io/distroless/static-debian10:nonroot"
]
}
-
Bug Report
---
Type: *bug report*
### What happened
K8s images are signed with cosign, the new MediaType is not supported yet.
```
ERRO[2022-06-07 21:57:25] Get blob info from gcr.io…
-
Apologies if this all comes off a bit blunt btw, I don't mean any disrespect 😅
I've spent the time to share this information for the benefit of Tyk and it's users. Hopefully some of the feedback w…
-
**What happened**:
I ran syft in an environment where no /tmp folder existed (a really small scratch container). In this container I tried to scan a container image tar file.
Command: `syft scan …
-
This is related to the following issue : https://github.com/containers/buildah/issues/4213.
Running `buildah bud --storage-driver=vfs` with the following `Dockerfile`, as root (just not privileged)…
-
I've just tried one the examples (https://github.com/GoogleContainerTools/distroless/tree/master/examples/python3-requirements) and I see that I'm able to `docker run --entrypoint=sh -ti hello:latest`…
-
Currently, Argo CD uses `ubuntu:21.10` as a base image.
Should an attacker gain access to the container they'll have a shell to use. They'll also have access to the Kubernetes API. Currently, they …
-
Investigate support for multi-arch in distroless, and how we can package a multi-arch image.
-
### What problem are you trying to solve?
I want to be able to create docker images that are deterministic and reduce the amount of layers that need to be sent to the registry. similar to how is expl…