distroless

distroless copied to clipboard

Debian Security Advisory package builds are not incorporated ASAP

1

**Describe the bug** The new version of an updated package is required by the CI workflow to be present for all architectures. Debian Security Advisories are sometimes published without a...

jonnyowenpowell

Images do not provide sanitizer runtime libs

3

**Describe the bug** This is somewhat of a feature request, but it is annoying to create asan/tsan enabled builds because distroless does not ship an image with these runtimes. Though...

kurt-google

distroless/python3-debian11 and distroless/python3-debian11:nonroot contain shell

5

**Describe the bug** The images `distroless/python3-debian11` and `distroless/python3-debian11:nonroot` contain the `sh` shell, contrary to what the documentation says. **To Reproduce** ``` $ docker run --rm -it --entrypoint sh gcr.io/distroless/python3-debian11:latest Unable...

griggheo

distroless/python3-debian11:debug is not signed with cosign

2

**Describe the bug** The distroless image gcr.io/distroless/python3-debian11:debug is not signed with cosign. **To Reproduce** I ran this script: ``` #!/bin/bash GOOGLE_COSIGN_PUB_KEY=google_cosign.pub rm -rf cosign.pub wget https://raw.githubusercontent.com/GoogleContainerTools/distroless/main/cosign.pub mv cosign.pub $GOOGLE_COSIGN_PUB_KEY GOOGLE_DISTROLESS_IMAGES='...

griggheo

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3. Release notes Sourced from ossf/scorecard-action's releases. v2.3.3 [!NOTE] There is no v2.3.2 release as a step was skipped in the release process. This was...

dependabot[bot]

I would like to understand for a distroless image of `gcr.io/distroless/java17-debian12:nonroot` what is the best way to add a custom certificate(crt) to the jvm ?

paul58914080

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.6 to 3.25.4. Changelog Sourced from github/codeql-action's changelog. CodeQL Action Changelog See the releases page for the relevant changes to the CodeQL CLI and language packs. Note...

dependabot[bot]

How to install git on a distroless image?

8

Hello, I need to install git on a java11 distroless image. Is there any way to do this? I have seen that the package information is added in the corresponding...

borja-rivera

Docker image with distroless as a base image is throwing error while deploying to AWS EKS

3

**Describe the bug** When using the `gcr.io/distroless/java17-debian11` base image in my Dockerfile to create a Docker image and deploying the same to AWS EKS cluster, I encountered an error. and...

Venkatesh-Navali

test: new rules_oci

1

just testing https://github.com/bazel-contrib/rules_oci/pull/550

thesayyn