project-copacetic / copacetic

🧵 CLI tool for directly patching container images using reports from vulnerability scanners
https://project-copacetic.github.io/copacetic/
Apache License 2.0
818 stars 55 forks source link

[REQ] Support "distroless" Alpine Images #596

Open ashnamehrotra opened 4 weeks ago

ashnamehrotra commented 4 weeks ago

What kind of request is this?

None

What is your request or suggestion?

https://github.com/project-copacetic/copacetic/blob/d648155f5424a9f4cb13acd7209195846791873b/pkg/pkgmgr/apk.go#L161

Turning copacetic TODO comments into issues from https://docs.google.com/spreadsheets/d/1XwNj1J6e2FrUhlqaIsV10l8_tgov7WodlkvpNZXYZMU/edit#gid=1386834576.

Are you willing to submit PRs to contribute to this feature request?

MiahaCybersec commented 2 weeks ago

APKO images appear to be detected as osType Wolfi so this issue can't be worked on until issue #38 is closed.

sozercan commented 2 weeks ago

that's correct. This comment in the code is old and should be removed.