-
Notifications
You must be signed in to change notification settings - Fork 49
Open
Labels
enhancementNew feature or requestNew feature or request
Description
What would you like to be added:
Currently syft & grype look for certain locations for finding the container images. It works fine if the container image is built either via docker
or podman
as the images they build reside in certain locations and those are part of the supported sources here.
Images built using buildah though reside in different location (usually containers-storage
) and when scanning using syft, it scans the remote image instead of the locally built image.
Why is this needed:
Need to add support for scanning images built using non-daemonize tool like buildah
. Add a new source where syft can look for when scanning image locally before checking OciRegistry.
Additional context:
nervgh and vit-zikmund
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or request
Type
Projects
Status
Backlog