Skip to content

Conversation

@EyeCantCU
Copy link
Member

This would be used to compare values for variables we set across our packages to ensure there is not drift between pinned dependencies in our packaging and in upstream images

There are a lot of images that intentionally ship pinned dependencies. A number of those images also declare the version of those dependencies within the image's environment. This is commonly seen across AI/ML images

Limited to assessing env vars for now

This would be used to compare values for variables we set across our
packages to ensure there is not drift between pinned dependencies in our
packaging and in upstream images

There are a lot of images that intentionally ship pinned dependencies. A
number of those images also declare the version of those dependencies
within the image's environment. This is commonly seen across AI/ML
images

Limited to assessing env vars for now

Signed-off-by: RJ Sampson <[email protected]>
log := clog.FromContext(ctx)

// Get image config with crane
configJSON, err := crane.Config(image, crane.WithContext(ctx))

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will always be checking the amd64 image by default, which we might be okay with? We could plumb an arch flag down to this as well in case we want to check the arm64 variant?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants