Azure / Azure/azure-functions-docker
4-dotnet-isolated8.0 and 4-dotnet-isolated8.0-slim images contain codec libraries requiring legal review for use within Microsoft
- Dominant language
- Dockerfile
- Stars
- 280
- Forks
- 126
- PR merge metrics
- No merged PRs in 30d
Description
These images contain the following libraries that require legal review to use within Microsoft (even for non-distributing uses):
- libdav1d6
- libgav1-1
- librav1e0
- libsvtav1enc1
An example legal review ticket that was generated by Component Governance: https://ossmsft.visualstudio.com/Reviews/_workitems/edit/49022
I traced the installation of these libraries to the `apt-get install -y libc-dev` step: https://github.com/Azure/azure-functions-docker/blob/2d406db47c62847992851de204281be1a29e2544/host/4/bullseye/amd64/dotnet/dotnet8-isolated/dotnet-isolated-slim.Dockerfile#L33C5-L33C32
Could you please provide a .NET 8 base image which does not include these libaries? #925 would likely work for us as an option.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.