aquasecurity / fanal

Static Analysis Library for Containers
Apache License 2.0
199 stars 100 forks source link

Use /etc/os-release when present instead of /etc/alpine-release et al #468

Closed kaniini closed 2 years ago

kaniini commented 2 years ago

The ID field in /etc/os-release is intended to be used for scanning tools to detect the OS. Syft uses /etc/os-release and then falls back to other detection methods when not present.