eclipse / steady

Analyses your Java applications for open-source dependencies with known vulnerabilities, using both static analysis and testing to determine code context and usage for greater accuracy. https://eclipse.github.io/steady/
Apache License 2.0
517 stars 124 forks source link

Use Docker tags instead of arch. specific digests #570

Closed henrikplate closed 1 year ago

henrikplate commented 1 year ago

The advantage of using tags is that Docker fetches the image according to the architecture in place (provided it exists), rather than downloading the image pinned with the digest, which may not match to the architecture.

TODOs