containerbuildsystem / atomic-reactor

97%

LAST BUILD ON BRANCH master

branch: master

CHANGE BRANCH

x

Reset

• master
• 1.6.51.2
• cachi2-export-config-files
• cachi2-inject-ca-cert
• cachi2-netrc
• cachi2-pip-dev-dependencies
• cachi2-rename-to-hermeto
• cachi2-source-containers
• cachi2_fix_test
• cachi2_include_git_dir
• cachi2_update_limits
• dependabot/github_actions/DavidAnson/markdownlint-cli2-action-19
• dependabot/github_actions/DavidAnson/markdownlint-cli2-action-20
• dependabot/github_actions/chmeliik/checkton-0.3.1
• dependabot/github_actions/chmeliik/checkton-0.4.0
• env-file-name
• feat-cachi2-remove-unsafe-symlinks-flag
• feature_cachi2
• fix-bundler-params-transofrmation
• fix-cachi2-skip-remote-sources-tarball
• fix-cachito-task
• fix-coveralls-pip
• fix-remote-sources-default
• fix-request-json
• fix_none_remote_sources_flags
• git-submodules-pkg-manager
• hermeto-default-config
• hermeto-explicit-cyclonedx
• hermeto-permissive-mode
• hermeto-yanr-npm-envvars
• hermeto_git_ssh
• image_name
• improve-hermeto-step-logs-readability
• odcs-integration
• print-hermeto-env
• print-hermeto-version
• record_remote_source_version_in_koji
• release_1.6.51
• release_2.1
• release_2.2
• release_2.3
• release_2.4
• release_3.0
• release_3.10
• release_3.11
• release_3.12
• release_3.13
• release_3.14
• release_3.4
• release_3.5
• release_3.6
• release_3.7
• release_3.8
• release_3.9
• release_4.0
• release_4.1
• release_4.10
• release_4.11
• release_4.12
• release_4.13
• release_4.14
• release_4.15
• release_4.16
• release_4.17
• release_4.18
• release_4.19
• release_4.2
• release_4.3
• release_4.4
• release_4.5
• release_4.6
• release_4.7
• release_4.8
• release_4.9
• rename-to-hermeto-final
• replace-add-with-copy
• skip-platform-builds
• skip-remote-sources-when-not-needed
• store-remote-sources-logs-in-extra-logfile

Build # 18221217378

Build Type

push

github

Committed by MartinBasti

Commit Message

fix: replace ADD with COPY

RHACS reports OSBS images as vulnerable because of the usage of ADD
instruction, that allows to fetch remote content.

It's false positive as OSBS uses local resources only, but it scares
users.

We need to use keep ADD instruction to inject filestystem for base image
builds, to untar sources

STONEBLD-3815

Signed-off-by: Martin Basti <mbasti@redhat.com>

Run Details

4 of 4 new or added lines in 3 files covered. (100.0%)

10011 of 10308 relevant lines covered (97.12%)

1.94 hits per line