search

jfrog / jfrog-cli

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products.
https://www.jfrog.com/confluence/display/CLI/JFrog+CLI
Apache License 2.0
533 stars 234 forks source link

scan container images with podman #1472

Open nekator opened 2 years ago

nekator commented 2 years ago

I would like to use the jfrog-cli to scan my container images with podman instead of docker because i´m running the cli with tekton inside a k8s cluster and there is no docker available. e.g. jf podman scan

The jfrog-cli-full image has podman already included an so it would be nice to have a container image scanning command using podman instead of docker.

Additional context https://github.com/jfrog/jfrog-ecosystem-integration-env/issues/19

vigneshsweekaran commented 1 year ago

When can we expect this feature ?. Jfrog-cli to use podman to scan the images

sverdlov93 commented 1 year ago

@nekator @vigneshsweekaran , @gira0, @bmanuel, and @vigneshsweekaran Thanks for reaching out. The ability to scan podman images already exists but is currently without a specific command, although it's on our roadmap to add it. You can run:

podman save --output image.tar
jf scan image.tar

And the same with buildah/oci/etc.

yannc21 commented 3 weeks ago

any updates on this ? I'd be nice to support nerdctl (provided with Rancher Desktop) as well

eyalbe4 commented 3 weeks ago

@yannc21, I recommend closing this issue, and reopening it under github.com/jfrog/jfrog-cli-security so that it receives more visibility by the team.