colin icon indicating copy to clipboard operation
colin copied to clipboard

colin checks if `pkg_mgr` calls `clean all`

Open phracek opened this issue 6 years ago • 1 comments

This check means, that after package installation yum/dnf clean all is called.

We have to go through layers and find whether dnf/yum install foobar and dnf/yum clean all is called in the same layer. Input for check is an image. Output of the check is True, whether dnf clean all is called in the same layer and False in opposite case.

phracek avatar Apr 09 '18 10:04 phracek

+1

It's possible that we might get some false positives. Worst case we can tune/disable the check in some rulesets.

TomasTomecek avatar Apr 10 '18 07:04 TomasTomecek