Azure / Azure/azure-functions-docker

4-dotnet-isolated8.0 and 4-dotnet-isolated8.0-slim images contain codec libraries requiring legal review for use within Microsoft

Open
#1,017 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Dockerfile
Stars
280
Forks
126
PR merge metrics
No merged PRs in 30d

Description

These images contain the following libraries that require legal review to use within Microsoft (even for non-distributing uses):

- libdav1d6
- libgav1-1
- librav1e0
- libsvtav1enc1

An example legal review ticket that was generated by Component Governance: https://ossmsft.visualstudio.com/Reviews/_workitems/edit/49022

I traced the installation of these libraries to the `apt-get install -y libc-dev` step: https://github.com/Azure/azure-functions-docker/blob/2d406db47c62847992851de204281be1a29e2544/host/4/bullseye/amd64/dotnet/dotnet8-isolated/dotnet-isolated-slim.Dockerfile#L33C5-L33C32

Could you please provide a .NET 8 base image which does not include these libaries? #925 would likely work for us as an option.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.