containerbuildsystem / atomic-reactor / 18221217378

97%

push

github

fix: replace ADD with COPY

RHACS reports OSBS images as vulnerable because of the usage of ADD
instruction, that allows to fetch remote content.

It's false positive as OSBS uses local resources only, but it scares
users.

We need to use keep ADD instruction to inject filestystem for base image
builds, to untar sources

STONEBLD-3815

Signed-off-by: Martin Basti <mbasti@redhat.com>

4 of 4 new or added lines in 3 files covered. (100.0%)

10011 of 10308 relevant lines covered (97.12%)

1.94 hits per line