Incorrectly flagging "Outdated base images found"
Open
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 454
- Forks
- 134
- PR merge metrics
- No merged PRs in 30d
Description
Docker Scout incorrectly assessed base image for PHP as outdated. Additionally Docker Scout's quick fix identifies same old image and new image. As you can see, both the "old" and "new" images are exactly the same (same tag and same SHA256 hash).
old image
php:8.4.6-cli-alpine@sha256:0c005fbcdecc04fe63d21220b0fdb7aba9f14b8bc92646a363a019fd65ca12fc
New image
php:8.4.6-cli-alpine@sha256:0c005fbcdecc04fe63d21220b0fdb7aba9f14b8bc92646a363a019fd65ca12fc
Here is a screenshot of Policies / No outdated base images / Results - QUICK FIX section
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the Docker Scout policy at Policies / No outdated base images / Results - QUICK FIX with the PHP image and digest shown. Compare the reported old and new values, then verify that identical tag and SHA256 values are no longer flagged or offered as a quick fix.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, php
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100