Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add flag for image scanning to use all catalogers rather than just some #1049

Closed
cpendery opened this issue Jun 15, 2022 · 2 comments · Fixed by #1050
Closed

add flag for image scanning to use all catalogers rather than just some #1049

cpendery opened this issue Jun 15, 2022 · 2 comments · Fixed by #1050
Labels
enhancement New feature or request

Comments

@cpendery
Copy link
Contributor

What would you like to be added:
I'd like to have a flag added where an image can be scanned by Syft using all catalogers rather than just a subset.

Why is this needed:
When I create images, I scan them for any vulnerabilities before the build process. I'd like to be able to detect if any files exist that could potentially bring in vulnerable artifacts during the build process.

Additional context:
This is the enhancement required based on #1046 as I had assumed this was default behavior

@cpendery cpendery added the enhancement New feature or request label Jun 15, 2022
@cpendery cpendery changed the title add flag add flag for image scanning to use all catalogers rather than just some Jun 15, 2022
@LOLCATATONIA
Copy link

The new 0.50 version should allow --use-all-catalogers, but it doesn't seem to work on my end?

$ syft version
Application:        syft
Version:            0.50.0
JsonSchemaVersion:  3.3.0
BuildDate:          2022-07-06T13:43:38Z
GitCommit:          69134ed3b54bc8b1d86d868611f7d069ce3290a8
GitDescription:     v0.50.0
Platform:           linux/amd64
GoVersion:          go1.18.3
Compiler:           gc
$ syft --use-all-catalogers
2022/07/07 08:31:33 error during command execution: unknown flag: --use-all-catalogers

@cpendery
Copy link
Contributor Author

cpendery commented Jul 7, 2022

The new 0.50 version should allow --use-all-catalogers, but it doesn't seem to work on my end?


$ syft version

Application:        syft

Version:            0.50.0

JsonSchemaVersion:  3.3.0

BuildDate:          2022-07-06T13:43:38Z

GitCommit:          69134ed3b54bc8b1d86d868611f7d069ce3290a8

GitDescription:     v0.50.0

Platform:           linux/amd64

GoVersion:          go1.18.3

Compiler:           gc


$ syft --use-all-catalogers

2022/07/07 08:31:33 error during command execution: unknown flag: --use-all-catalogers

I should have updated the pr title @LOLCATATONIA. We decided to reuse the --catalogers flag to include all catalogers if you passed in the keyword all. I'll make a pr to make this more clear in the docs/cli

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants