anchore / anchore/scan-action

Distroless warnings

Open
#361 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
287
Forks
95
Avg merge
13h 23m
Merged PRs (30d)
13

Description

When using a distroless and minimal image, grype output shows warnings of missing files, e.g.
```
WARN parsing dpkg status: extracting key-value from line: [...] usr/lib/os-release err: cannot parse field from line:
[...] usr/lib/os-release' form-lib=syft
```

Is there a way to mute these false positives, as these are expected to be mising?

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the warning with a distroless or minimal image in the GitHub Action workflow, then trace how the scan output is surfaced. Done means expected missing-file warnings can be muted without suppressing unrelated warnings.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.