Use Docker API instead of shelling out

aquasecurity / manifesto

Use Manifesto to store and query metadata for container images.

Apache License 2.0

164 stars 15 forks source link

Use Docker API instead of shelling out #22

Open johnharris85 opened 6 years ago

johnharris85 commented 6 years ago

Saw this in the TODO list and happy to take a crack at it if no one else is working on it?

lizrice commented 6 years ago

That would be wonderful @johnharris85!

johnharris85 commented 6 years ago

So was taking a look at this, and there is a lot of work done by the cli itself around authentication, notary, etc... before calling the API. What do you think is the best approach? Duplicate some (bits required) of that code in manifesto and use the API, or just create a cli instance and use that?

lizrice commented 6 years ago

Hi @johnharris85 and sorry to take so long to get back on this! I don't have any concerns about using a cli instance if that's going to be the easiest approach. It might well bring us some additional benefits e.g. we'll be that much closer to experimenting with Notary signing the metadata too. Thanks!