aboutcode-org / aboutcode-org/scancode.io

In alpine container where the first layer is not clearly alpine, we do not detect the OS

Aperta
#1,159 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
Python
Stelle
215
Fork
203
Merge medio
4g 8h
PR unite (30g)
6

Descrizione

Say I build a container where:
- the first layer is not using a base image, and contains only something like:`COPY /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt`
- the second layer is essentially an Alpine base image

Since the first layer does not have the /etc/os-release and related, it will not be detected as Alpine.

The same issue may exist with other distros.

The solution is to look at all the layers before deciding on what the primary OS is (and also nothing prohibits to have multiple OS personalities across layers or even in the same layer(

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.