Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Klar should be able to scan OCI images #191

Open
HarvyNBB opened this issue May 8, 2023 · 0 comments
Open

Feature: Klar should be able to scan OCI images #191

HarvyNBB opened this issue May 8, 2023 · 0 comments

Comments

@HarvyNBB
Copy link

HarvyNBB commented May 8, 2023

Brief:

On January 9th Buildx v0.10 was released. The release notes included the following warning:

Buildx v0.10 enables support for a minimal SLSA Provenance 1 attestation, which requires support for OCI-compliant multi-platform images.
Klar does not support oci images hence the Clair scan for any image that is build using buildx v0.10 fails.
It's possible to optionally disable the default provenance attestation functionality using --provenance=false in the buildx which will generate docker images instead of OCI images.

Error received by Klar when scanning an OCI image

{"errors":[\{"code":"MANIFEST_UNKNOWN","message":"OCI index found, but accept header does not support OCI indexes"}
--
]}
Can't pull fsLayers

KLAR_VERSION=2.4.0

Feature request:

Klar should support OCI images format

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant