Uploaded image for project: 'Red Hat Advanced Cluster Security'
  1. Red Hat Advanced Cluster Security
  2. ROX-30920

Scanner V4 needs to recognize layers of Konflux-built images

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None
    • Future Sustainability
    • False
    • Hide

      None

      Show
      None
    • False

      Claircore now supports reading the labels.json file in Konflux-built images - https://github.com/quay/claircore/pull/1544. As of this moment, there are no images with this file, so it's always possible this implementation is not 100% sufficient.

      Nonetheless, Scanner V4 should be able to identify layers in Konflux-built images, too, based on Claircore's implementation.

      == FROM DUPE TICKET ROX-29933

      In 4.8, we added a feature https://issues.redhat.com/browse/ROX-27443 to only show Red Hat data for Red Hat layers. This only works for images built by the older, legacy build system. The new build system, Konflux, works differently, and we will need to update how we identify the Konflux layers.

      See https://issues.redhat.com/browse/KONFLUX-6210 and https://issues.redhat.com/browse/CLAIRDEV-123 for related work

              Unassigned Unassigned
              rtannenb@redhat.com Ross Tannenbaum (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: