mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
259 stars 58 forks source link

Prepare Wrapper Application add Tag to docker archive #3234

Open lorriborri opened 1 week ago

lorriborri commented 1 week ago

Situation

The Skopeo module downloads the docker images, but it does not add Tags to the archive (like the docker save command does). To use the PDS Xray tags are necessary to get the image name and tag to be able to upload it to the artifactory.

Wanted

the image name should be added as tag to the docker archive

Solution

Make use of skopeo -- add-additional-tag <tag> with the name of the image that we want to scan. The image name can be get from the location defined in the remote data section.