wave icon indicating copy to clipboard operation
wave copied to clipboard

Add additional checks when building with Wave

Open mribeirodantas opened this issue 11 months ago • 1 comments

Wave already does security checking with Trivy. Based on that, it would be nice if Wave could perform additional checks.

Let's say a user runs a Nextflow pipeline. They don't know Nextflow, they're just following instructions on how to run the pipeline, so they're not aware of what package manager is being used to solve software dependencies or what conda channels were picked. If the pipeline is set to use Wave to build a container image based on a dockerfile, conda recipe, or conda process directives, Wave during the build could warn the user that the defaults anaconda channel is being used.

mribeirodantas avatar Dec 02 '24 14:12 mribeirodantas

@mribeirodantas What is the goal here? should we just. add a log entry stating user is using defaults channel?

munishchouhan avatar Dec 10 '24 16:12 munishchouhan