crashappsec / chalk

Chalk allows you to follow code from development, through builds and into production.
https://crashoverride.com/
GNU General Public License v3.0
322 stars 11 forks source link

remove buildx dependency for manifest inspection #277

Closed miki725 closed 1 month ago

miki725 commented 2 months ago

Currently chalk relies on docker buildx imagetools inspect for registry manifest inspection. This is problematic as buildx is required which is not guaranteed in all environments. We should manually interact with the registry to reduce buildx dependency in chalk.

This was noticed by someone running from self-hosted github runners which dont have buildx installed.