How to scan Image created by Jib task before pushing to Registry

[eldo26]

• Jib version: 3.2.1
• Build tool: Gradle

Description of the issue:

• Is it possible to the scan the images build by jib task, before get pushed to registry.
• Is it possible to keep multiple config for each task, for Example
  • jib task a different config, which builds multi arch image.
  • jibDockerBuild task an another config, which should create an image matching with node architecture.

When we put multi arch config, jibDockerBuild task is failing with below error multi-platform image building not supported when pushing to Docker engine

[eldo26]

@chanseokoh could you able to assist please.

[mpeddada1]

@eldo26

• For the first question on scanning images build by the jib task. You could build your image to the docker daemon with jibDockerBuild and use a scanning tool like dive to scan your image.
• I'm not sure if I fully understand what you're trying to achieve. Is it similar to https://github.com/GoogleContainerTools/jib/issues/1756? Could you provide an example or a snippet of the build.gradle you're aiming for?

Additionally, https://github.com/GoogleContainerTools/jib/issues/3692 might help answer your question on the multi-platform image building not supported when pushing to Docker engine error.

[abluepoint-dev]

use jib:build instand of jib:dockerBuild

[alicejli]

Closing this due to lack of response as well as viable workarounds.