Not able to scan local images
Hi Adrian,
I ran into issues when trying to run the scorer against local images. Below is the output from when I tried to use it in podman on my Windows machine. I got the same result on my Mac (m1) with Docker. Not sure if this is operator error or something else, but let me know if you need any more output from my end! Thanks.
```
# Verify the image tag
$ podman image ls | grep dpkg
localhost/dpkg-test 0.0.1 90082e8e0e50 28 hours ago 35.8 MB
# Run CHPS scorer against the image using local tag
$ podman run --privileged ghcr.io/chps-dev/chps-scorer:latest localhost/dpkg-test:0.0.1
Pulling image: localhost/dpkg-test:0.0.1
Error: Failed to pull image
# Get the hash
$ podman image inspect localhost/dpkg-test:0.0.1
[
{
"Id": "90082e8e0e5044004431161c1a93bd46fd6f9bb322c0f7b9f92cf2575fe70918",
"Digest": "sha256:701e00039f95d49713b989a742ebe030b41c5b72120bf8feeed2e06be29082c2",
"RepoTags": [
"localhost/dpkg-test:0.0.1"
],
# Trying with hash instead
$ podman run --privileged ghcr.io/chps-dev/chps-scorer:latest localhost/dpkg-test@sha256:701e00039f95d49713b989a742ebe030b41c5b72120bf8feeed2e06be29082c2
Pulling image: localhost/dpkg-test@sha256:701e00039f95d49713b989a742ebe030b41c5b72120bf8feeed2e06be29082c2
Error: Failed to pull image
# Try a different image
$ podman run --privileged ghcr.io/chps-dev/chps-scorer:latest localhost/chainguard/dotnet-sdk:latest-dev
Pulling image: localhost/chainguard/dotnet-sdk:latest-dev
Error: Failed to pull image
# Try against the same image in the Chainguard repo
$ podman run --privileged ghcr.io/chps-dev/chps-scorer:latest cgr.dev/chainguard/dotnet-sdk:latest-dev
Pulling image: cgr.dev/chainguard/dotnet-sdk:latest-dev
Scoring image: cgr.dev/chainguard/dotnet-sdk@sha256:50b73202fe181248a743b1eaa862bcd1e9038df6d7fe6be43f5bddb66c0397a2
----------------------------------------
Checking Minimalism criteria...
```
关闭于 2025-06-03 4 条评论