distroless

distroless copied to clipboard

**CVE disclosure** A link to a public CVE disclosure: [CVE-2022-1292](https://cve.org/CVERecord?id=CVE-2022-1292) **Name of image** debian11 **Link to updated package** A link to an available update for this package https://www.openssl.org/source/openssl-1.1.1q.tar.gz

Fcmam5

Python image marked as experimental

5

Looking at the readme python image is listed as experimental however when tracing back the history, the message about python image being experimental has been there for about 4 years....

slimm609

**Describe the bug** This is less of a bug and more of a design choice. Today, we include libssl / openssl in our distroless images. These two libraries are the...

wespanther

CVE-2022-2068 highlights that libssl and openssl are an active CVE service. It's not clear how many applications need those libraries. Have we considered a non-ssl base image?

mattcary

WIP Build node images with standardised format

3

Standardises the nodejs images. Closes #1084

omBratteng

Update jetty version to jetty-distribution-9.4.48.v20220622

2

I would like to create a PR for jetty-distribution-9.4.45.v20220203.

sebbrandt87

Java Arm Images

6

Hi! It seems arm images are built from python and a few other languages, but not for java. Is there any chance java arm images could be added? Thanks!

rob-pomelo

multi-arch support for Java/Jetty

2

Following in the style of https://github.com/GoogleContainerTools/distroless/pull/605 and its predecessors. cc @loosebazooka @chanseokoh

mattmoor

Standardise naming of nodejs images

9

To not fill the PR with non-related discussion, re: https://github.com/GoogleContainerTools/distroless/pull/1083#issuecomment-1184551777, I open this issue as a tracker to discuss standardising nodejs images. > I think it might be time to...

omBratteng

Add `nonroot` to nodejs images

5

I came across #892, and thought I'd give it a go to add `nonroot` images for node Closes #892

omBratteng