Skip to content

linux.md

Latest commit

 

History

History
56 lines (31 loc) · 2.14 KB

linux.md

File metadata and controls

56 lines (31 loc) · 2.14 KB

Linux Detection

Requirements

Linux detection depends on the following:

Detection strategy

Linux package detection is performed by running Syft and parsing the output. The output contains the package name, version, and the layer of the container in which it was found.

Supported Input Types

The Linux detector runs on container images passed under the --DockerImagesToScan flag.

Supported image reference formats are:

Name and Tag/Digest

Images in the local Docker daemon or a remote registry can be referenced by name and tag or digest. For example, ubuntu:16.04. Remote images will be pulled if they are not present locally.

Digest Only

Images already present in the local Docker daemon can be referenced by just a digest. For example, sha256:56bab49eef2ef07505f6a1b0d5bd3a601dfc3c76ad4460f24c91d6fa298369ab.

OCI Images

Images present on the filesystem as either an OCI layout directory or an OCI image archive (tarball) can be referenced by file path.

  • For OCI image layout directories, use the prefix oci-dir: followed by the path to the directory, e.g. oci-dir:/path/to/image
  • For OCI image archives (tarballs), use the prefix oci-archive: followed by the path to the archive file, e.g. oci-archive:/path/to/image.tar

Docker Archives

Images saved to disk via docker save can be referenced using the docker-archive: prefix followed by the path to the tarball, e.g. docker-archive:/path/to/image.tar.

Scanner Scope

By default, this detector invokes Syft with the all-layers scanning scope (i.e. the Syft argument --scope all-layers).

Syft has another scope, squashed, which can be used to scan only files accessible from the final layer of an image.

The detector argument Linux.ImageScanScope can be used to configure this option as squashed or all-layers when invoking Component Detection.

For example:

--DetectorArgs Linux.ImageScanScope=squashed

Known limitations

  • Windows container scanning is not supported
  • Multiplatform images are not supported