@@ -12,38 +12,18 @@ To do this:
1212 ```
1313
14142. Find the [latest version of Syft][2]
15- 3. Pull the latest container image
15+ 3. Copy the multi-platform image to the registry
1616
1717 ```
18- $ docker pull docker.io/anchore/syft:v{LATEST}
19- v0.53.4: Pulling from anchore/syft
20- 0d60d5ab2113: Pull complete
21- 26136f3e3dd3: Pull complete
22- 497aa7f04842: Pull complete
23- Digest: sha256:37e85e8efdeaabb1b6f65c5bc175b664cb05d1aaddd0d922130b8e25d6e49726
24- Status: Downloaded newer image for anchore/syft:v{LATEST}
25- docker.io/anchore/syft:v{LATEST}
18+ $ docker buildx imagetools create \
19+ --tag governancecontainerregistry.azurecr.io/syft:v{LATEST} \
20+ docker.io/anchore/syft:v{LATEST}
2621 ```
2722
28- 4. Retag the container image
23+ This command preserves all platform images and creates a proper multi-platform manifest in the registry.
2924
30- ```
31- $ docker tag docker.io/anchore/syft:v{LATEST} governancecontainerregistry.azurecr.io/syft:v{LATEST}
32- ```
33-
34- 5. Push the new image to the registry
35-
36- ```
37- $ docker push governancecontainerregistry.azurecr.io/syft:v{LATEST}
38- The push refers to repository [governancecontainerregistry.azurecr.io/syft]
39- 9c858c120b14: Pushed
40- 840f3b941d62: Pushed
41- 21ce82bb7448: Pushed
42- v{LATEST}: digest: sha256:04ed9c717a814fdccf52758b67333632a0ff16840fc393f5fba5864285eaebbe size: 945
43- ```
44-
45- 6. Update the container reference in [`LinuxScanner`][3]
46- 7. Update [the models][4] that map the Syft output
25+ 4. Update the container reference in [`LinuxScanner`][3]
26+ 5. Update [the models][4] that map the Syft output
4727
4828[1]: https://github.com/anchore/syft
4929[2]: https://github.com/anchore/syft/releases/latest
0 commit comments