Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

False-positive detection of CIS-DI-0009 for focal based dotnet images #208

Closed
ThorstenHans opened this issue Nov 16, 2022 · 1 comment
Closed

False-positive detection of CIS-DI-0009 for focal based dotnet images #208

ThorstenHans opened this issue Nov 16, 2022 · 1 comment
Labels
bug Something isn't working

Comments

@ThorstenHans
Copy link

Description

I ran into a situation in which dockle reports images built based on official dotnet images violating CIS-DI-0009. Microsoft recently moved from Ubuntu base images hosted on Docker Hub to Canonicals images hosted on Azure Container Registry (ACR) since that move happened, dockle reports that all my images violate the CIS-DI-0009 rule.

Further information about the bug, steps to reproduce and more contextual information could be found in this issue: dotnet/dotnet-docker#4209
@ThorstenHans ThorstenHans added the bug Something isn't working label Nov 16, 2022
@tomoyamachi
Copy link
Collaborator

Dockle is a tool to ensure that you are following standard best practices for container images. It does not matter if it is an official image or not.

You can use the IGNORE flag if you trust ADDed files.

This was referenced Mar 22, 2023
Closed
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@ThorstenHans @tomoyamachi