[datasource] Add support for base image deprecation

xeol-io / xeol

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

https://www.xeol.io/

Apache License 2.0

332 stars 18 forks source link

[datasource] Add support for base image deprecation #231

Open noqcks opened 7 months ago

noqcks commented 7 months ago

What would you like to be added:

Motivated by this LinkedIn post by Rory McCune

We should be able to identify and flag deprecated base images. There is work in the oci-spec around annotations to signal deprecation, but it's not yet completed. https://github.com/opencontainers/image-spec/pull/903

An alternative would be of Dockerhub or other registries supported a deprecation flag.