Skip to content

feat(misconf): normalize CreatedBy strings for COPY and ADD instructions for podman (buildah) images #8952

Description

@nikpivkin

Example dockerfile:

FROM scratch
COPY . ./files
ADD readme readme

Build image via podman build . --inherit-labels=false --tag myimage:test

History:

❯ podman history myimage:test --format "{{.CreatedBy}}" --no-trunc
/bin/sh -c #(nop) ADD file:24d346633efc860b5011cefa5c0af73006e74e5dfb3c5c0e9cb0e90a927931e1 in readme |inheritLabels=false
/bin/sh -c #(nop) COPY dir:55f494488e3d5d72974d2ecacf26a1989faabb3185b66505f2bb02394a6505ae in ./files |inheritLabels=false

Code for building a string in buildah: https://github.com/containers/buildah/blob/5a02e74b5d0f01e4d68ea0dcdbf5f5f444baa68f/imagebuildah/stage_executor.go#L1982

Discussed in #8943

Metadata

Metadata

Assignees

Labels

kind/featureCategorizes issue or PR as related to a new feature.scan/misconfigurationIssues relating to misconfiguration scanning

Type

No type

Fields

No fields configured for issues without a type.

Projects

Status
No status

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions