chainguard-dev / chainguard-dev/dfc

Connect to Chainguard account, only suggest images that user has access to

Open
#55 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
103
Forks
29
PR merge metrics
No merged PRs in 30d

Description

Currently the determination on how to provide convert FROM lines is based on naming conventions and the builtin-mappings.yaml

For example,
echo "FROM eclipse-temurin" | dfc --org=example.com -
--> FROM cgr.dev/example.com/jdk:latest-dev

However, in the example above, if the user does not have an image called "jdk" in their registry, this results in an unusable Dockerfile.

Add a flag such as --auth or --connect (or perhaps make this the default when --org is supplied), which will use the Chainguard SDK to list image repos in the account and only finalize the conversion of a FROM line if the user has access to the image.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the --org option and the FROM-line conversion flow, then inspect pkg/dfc/builtin-mappings.yaml and the Chainguard SDK integration points. Determine how to list image repositories available to the account and how conversion currently selects mappings. Done means an auth or connect option can verify access and leaves FROM lines unchanged or otherwise avoids unusable images when the account lacks the mapped repository.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, go
Domain
api, cli
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.