Skip to content

feat: [CN-296] Support Container Base Image Recommendations#991

Draft
dan-arpino wants to merge 1 commit intomainfrom
feat/CN-296-container-base-image-rec
Draft

feat: [CN-296] Support Container Base Image Recommendations#991
dan-arpino wants to merge 1 commit intomainfrom
feat/CN-296-container-base-image-rec

Conversation

@dan-arpino
Copy link
Copy Markdown
Contributor

@dan-arpino dan-arpino commented Sep 8, 2025

Adding a new Container LS to support the upgrading the container base images in a docker file.

Description

Adding base image recommendations to the IDE. This will scan docker files for base images and check if we have any base image upgrade recommendations CN-296

Checklist

  • Tests added and all succeed
  • Regenerated mocks, etc. (make generate)
  • Linted (make lint-fix)
  • README.md updated, if user-facing
  • License file updated, if new 3rd-party dependency is introduced

@CLAassistant
Copy link
Copy Markdown

CLAassistant commented Sep 8, 2025

CLA assistant check
All committers have signed the CLA.

@snyk-io
Copy link
Copy Markdown

snyk-io bot commented Sep 8, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

agg.referenceScanStates[folderProductKey{Product: product.ProductOpenSource, FolderPath: folderPath}] = &scanState{Status: NotStarted}
agg.referenceScanStates[folderProductKey{Product: product.ProductCode, FolderPath: folderPath}] = &scanState{Status: NotStarted}
agg.referenceScanStates[folderProductKey{Product: product.ProductInfrastructureAsCode, FolderPath: folderPath}] = &scanState{Status: NotStarted}
agg.referenceScanStates[folderProductKey{Product: product.ProductContainer, FolderPath: folderPath}] = &scanState{Status: NotStarted}
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does your implementation support delta scanning? If not, this probably needs a revision.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The whole API client functionality should be a workflow in https://github.com/snyk/go-application-framework and used / imported here. That would enable re-use in the CLI and migration away from the legacy CLI functionality through using a go-workflow.

}

codeAction, err := snyk.NewCodeAction(
fmt.Sprintf("Upgrade to %s", recommendation.RecommendedImage),
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We may want to add (Snyk) at the end of the action title.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, in Open Source, we add the number of issues that would be fixed, and the number of issues that would remain in the text. Having that for container, would be great!

@dan-arpino dan-arpino force-pushed the feat/CN-296-container-base-image-rec branch from 9052808 to aa527af Compare December 23, 2025 17:06
@dan-arpino dan-arpino force-pushed the feat/CN-296-container-base-image-rec branch from aa527af to 20b48fd Compare December 23, 2025 17:07
@dan-arpino dan-arpino force-pushed the feat/CN-296-container-base-image-rec branch from 20b48fd to 18f175f Compare December 23, 2025 17:10
@dan-arpino dan-arpino force-pushed the feat/CN-296-container-base-image-rec branch from 18f175f to 1c3ba84 Compare December 23, 2025 17:23
@dan-arpino dan-arpino force-pushed the feat/CN-296-container-base-image-rec branch from 1c3ba84 to e0c1ab5 Compare December 30, 2025 18:40
@bastiandoetsch bastiandoetsch reopened this Jan 2, 2026
Adding a new Container LS to support the upgrading the container base images in a docker file.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants