sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
549 stars 76 forks source link

Running nancy in Azure DevOps requires bash to be present in the image #253

Open mrooding opened 2 years ago

mrooding commented 2 years ago

Thanks for creating an issue! Please fill out this form so we can be sure to have all the information we need, and to minimize back and forth.

Run nancy's official docker image in an Azure DevOps pipeline

ADO requires that any container that you run as part of the pipeline have bash installed in the container. Do you want to add bash to be part of the original image? If not, I'll have to extend the image and maintain my own version

Thank you!

cc @bhamail / @DarthHater

DarthHater commented 2 years ago

bash specifically or just any type of sh?

mrooding commented 2 years ago

Unfortunately, bash specifically. It's only a requirement if you use the container as a container resource. I was able to bypass the requirement by running go list .. | docker ... in a normal ADO shell step though

DarthHater commented 2 years ago

I think it might be preferable to create a new docker image variant type, rather than add it to the current alpine image. Would that be ok?

mrooding commented 2 years ago

That would be a perfect solution 👍