wave
wave copied to clipboard
Add additional checks when building with Wave
Wave already does security checking with Trivy. Based on that, it would be nice if Wave could perform additional checks.
Let's say a user runs a Nextflow pipeline. They don't know Nextflow, they're just following instructions on how to run the pipeline, so they're not aware of what package manager is being used to solve software dependencies or what conda channels were picked. If the pipeline is set to use Wave to build a container image based on a dockerfile, conda recipe, or conda process directives, Wave during the build could warn the user that the defaults anaconda channel is being used.
@mribeirodantas What is the goal here? should we just. add a log entry stating user is using defaults channel?