DataBiosphere / azul

Metadata indexer and query service used for AnVIL, HCA, LungMAP, and CGP
Apache License 2.0
6 stars 2 forks source link

Docker docker image cannot be scanned by AWS Inspector #6311

Closed dsotirho-ucsc closed 1 week ago

dsotirho-ucsc commented 1 month ago

The updated docker docker image added by PR #6290 cannot be scanned by AWS Inspector.

Image not supported UnsupportedImageError: The operating system and/or package manager are not supported.

may28

hannes-ucsc commented 1 month ago

Upstream blocker: ~https://github.com/aws/containers-roadmap/issues/2358~ https://github.com/aws/containers-roadmap/issues/2357

~https://github.com/aws/containers-roadmap/issues/2358#issuecomment-2141363006~ https://github.com/aws/containers-roadmap/issues/2357#issuecomment-2161323407

dsotirho-ucsc commented 1 month ago

Assignee to periodically check upstream blocker.

rgoltz commented 1 month ago

Hi @hannes-ucsc & @dsotirho-ucsc - Could you please correct your link to the upstream blocker? - Since you are using AWS Inspector (so called Enhanced Scan in AWS ECR), it's https://github.com/aws/containers-roadmap/issues/2357 you are waiting for - The other issue is related to the Basic Scan in AWS ECR. From my testing your docker image-tag (25.0.5-alpine3.20) is already scanable in Basic, but not in Enhanced Scan (unfortunately - please see the linked discussion)

hannes-ucsc commented 1 month ago

Done. Thanks for the pointer, @rgoltz

rgoltz commented 1 month ago

@hannes-ucsc & @dsotirho-ucsc : AWS ECR Inspector updated the docs with support for Alpine 3.20. It's working on your end? (in case yes, I would close the linked github issue)

dsotirho-ucsc commented 1 month ago

Thank you @rgoltz I've confirmed AWS Inspector scan results are now available for our image.

Screenshot 2024-06-20 at 9 12 52 AM

achave11-ucsc commented 1 month ago

@hannes-ucsc: "For demo, show that findings are detected for the Docker images in the screenshot of the inspector findings spreadsheet from the most recent upgrade issue."