-
Bug
-
Resolution: Done
-
Undefined
-
None
-
None
-
False
-
-
False
-
-
-
-
Important
USER PROBLEM
Image " registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7" contains shell variables
The image contains shell variables in /root/buildinfo/labels.json`:
{ "cpe": "cpe:/a:redhat:network_observ_optr:$BUILDVERSION_Y::el9", "version": "$BUILDVERSION"}
RHACS is unable to scan image "registry.redhat.io/network-observability/network-observability-flowlogs-pipeline-rhel9@sha256:b789d62036a3917cfe421b3f3119c6397dbb6c45fee82ca6d98002aa9b9223c7" and reports error mentioned below,which indicates that the scanner component failed because it encountered a disallowed character while attempting to parse the component data (CPE version).
error: code = Internal desc = failed to scan all layer contents: layer \"sha256:145d7b5d75944e4f5cc9bd4529a5333648441e10a52a55b71eb135b8d169a17a\": cpe: version: disallowed character '$'"}
This is a build defect in the `network-observability-flowlogs-pipeline-rhel9` image, not a Scanner V4 or ClairCore bug. Essentially the image is not "scannable" as it is malformed.
Bug to be referred for more details: