dive

dive copied to clipboard

go-containerregistry is a golang library for working with container registries. By supporting this library as a new resolver, we don't need Docker dependency anymore (save & pull stuff in pipeline) since we are able to talk directly with registries. I'm not sure if this is a straightforward task to implement but all we need to do is write a simple converter to convert go-containerregistry models into dives'.

cc @developer-guy

We're willing to work on it, just assign it to us @wagoodman 😋🤞

Kind ping here 🎗️ @wagoodman Does it make sense in overall?

actually, I'd like to rebase dive to use anchore/stereoscope instead, which uses google/go-containerregistry under the hood, but also has many of the filetree objects and layer reasoning needed to drive the analysis and UI.