Grig Gheorghiu

distroless/python3-debian11 and distroless/python3-debian11:nonroot contain shell

5

**Describe the bug** The images `distroless/python3-debian11` and `distroless/python3-debian11:nonroot` contain the `sh` shell, contrary to what the documentation says. **To Reproduce** ``` $ docker run --rm -it --entrypoint sh gcr.io/distroless/python3-debian11:latest Unable...

distroless/python3-debian11:debug is not signed with cosign

2

**Describe the bug** The distroless image gcr.io/distroless/python3-debian11:debug is not signed with cosign. **To Reproduce** I ran this script: ``` #!/bin/bash GOOGLE_COSIGN_PUB_KEY=google_cosign.pub rm -rf cosign.pub wget https://raw.githubusercontent.com/GoogleContainerTools/distroless/main/cosign.pub mv cosign.pub $GOOGLE_COSIGN_PUB_KEY GOOGLE_DISTROLESS_IMAGES='...