anchore-engine icon indicating copy to clipboard operation
anchore-engine copied to clipboard

Published 20 hours ago • verified publisher icon anchore

Using anchore to scan Rocky Linux Images

Open silvio201 opened this issue 3 years ago • 5 comments

Hello,

Im trying to use anchore engine to scan selfmade docker images. The scanning works fine with older CentOS images, but our company recently started using Rocky Linux as the base OS for our containers. Since Rocky Linux is based on RHEL 8, is there any possiblity to use the CVEs from RHEL in order to scan our images for Vulnerabilities?.

Im looking forward to your response.

silvio201 avatar Oct 27 '21 10:10 silvio201

@silvio201 great question! I believe we're currently working on a solution for rocky linux, however I'm going to transfer this issue over to the anchore-engine project as the folks maintaining that project will be able to provide a better answer for you.

Btodhunter avatar Nov 01 '21 18:11 Btodhunter

@Btodhunter Adding AlmaLinux support would be nice along with Rocky Linux support, both are in the same family. Would prefer separate issue for AlmaLinux?

https://github.com/anchore/grype/search?q=almalinux&type=issues

srbala avatar Nov 02 '21 04:11 srbala

Hi @srbala support for Rocky Linux is coming in the upcoming 1.1.0 release.

zhill avatar Dec 02 '21 06:12 zhill

Thats great, thanks for keeping us uptodate

silvio201 avatar Dec 02 '21 07:12 silvio201

@zhill thanks for the note. @Btodhunter @nightfurys Please review and let me know any more changes required, looking forward for full Almalinux support too. https://github.com/anchore/syft/pull/652 https://github.com/anchore/grype/pull/514 https://github.com/anchore/grype-db/pull/40 https://github.com/anchore/anchore-engine/pull/1326

srbala avatar Dec 02 '21 10:12 srbala