aboutcode-org / aboutcode-org/scancode.io

In alpine container where the first layer is not clearly alpine, we do not detect the OS

Open
#1,159 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

Say I build a container where:
- the first layer is not using a base image, and contains only something like:`COPY /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt`
- the second layer is essentially an Alpine base image

Since the first layer does not have the /etc/os-release and related, it will not be detected as Alpine.

The same issue may exist with other distros.

The solution is to look at all the layers before deciding on what the primary OS is (and also nothing prohibits to have multiple OS personalities across layers or even in the same layer(

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.