distroless

distroless copied to clipboard

`/home` incorrectly has ownership changed to `nonroot:nonroot` (`65532:65532`)

6

**Describe the bug** Images (at least Debian 12 variants) seem to add `/home/nonroot` layer that modifies the ownership of `/home`: >  Presumably that was unintentional and only meant to...

polarathene

How to update snapshots manually for not maintained images

2

Hello, Since the repository maintainers will no longer be generating debian11 images, I need to continue generating them on my own. For this, I understand that when a new vulnerability...

borja-rivera

403 Forbidden when pushing custom images based on latest node.js 18.x and 20.x distroless images to GCR

11

We started having issues with latest nodejs 18.x and 20.x distroless images. I'll add more context and exemplify for nodejs 20.x. We have a simple Dockerfile defined with following content:...

claudiu-muresan-pfa

Unable to reach certain IP addresses

5

**Describe the bug** We are observing that wget (and our Go services) hangs itself trying to connect to certain IP addresses. Theses addresses resolve fine outside of the distroless container....

aeneasr

Bumps [express](https://github.com/expressjs/express) from 4.18.1 to 4.20.0. Release notes Sourced from express's releases. 4.20.0 What's Changed Important IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was...

dependabot[bot]

Bump github/codeql-action from 3.28.15 to 3.29.0

1

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.15 to 3.29.0. Release notes Sourced from github/codeql-action's releases. v3.29.0 CodeQL Action Changelog See the releases page for the relevant changes to the CodeQL CLI and language...

dependabot[bot]

- [ ] I have read the [SECURITY.md](https://github.com/GoogleContainerTools/distroless/blob/main/SECURITY.md) - [ ] I understand that this repo tracks debian package releases and cannot fix debian CVEs on its own - [...

tgramov1710

Bump ossf/scorecard-action from 2.3.3 to 2.4.2

1

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.3 to 2.4.2. Release notes Sourced from ossf/scorecard-action's releases. v2.4.2 What's Changed This update bumps the Scorecard version to the v5.2.1 release. For a complete list of...

dependabot[bot]

gcr.io/distroless/cc-debian12:nonroot huge performance decrease for rust based app

1

I recently switched a Dockerfile that builds a [Rama](https://github.com/plabayo/rama) derivative from: ``` FROM debian:bookworm-slim AS prod RUN apt-get update && \ apt-get install --no-install-recommends -y ca-certificates ``` to this: ```...

soundofspace

Add BloodHound by SpecterOps as distroless user

1

hairlesshobo