Distroless warnings
Open
- Dominant language
- JavaScript
- Stars
- 287
- Forks
- 95
- Avg merge
- 13h 23m
- Merged PRs (30d)
- 13
Description
When using a distroless and minimal image, grype output shows warnings of missing files, e.g.
```
WARN parsing dpkg status: extracting key-value from line: [...] usr/lib/os-release err: cannot parse field from line:
[...] usr/lib/os-release' form-lib=syft
```
Is there a way to mute these false positives, as these are expected to be mising?
Contributor guide
Research direction
Start by reproducing the warning with a distroless or minimal image in the GitHub Action workflow, then trace how the scan output is surfaced. Done means expected missing-file warnings can be muted without suppressing unrelated warnings.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 32/100