Skip to content

Commit d8c0daa

Browse files
authored
Update Syft from 1.16.0 to 1.37.0 (#1527)
1 parent 855dc28 commit d8c0daa

File tree

3 files changed

+144
-126
lines changed

3 files changed

+144
-126
lines changed

docs/update-syft.md

Lines changed: 7 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -12,38 +12,18 @@ To do this:
1212
```
1313
1414
2. Find the [latest version of Syft][2]
15-
3. Pull the latest container image
15+
3. Copy the multi-platform image to the registry
1616
1717
```
18-
$ docker pull docker.io/anchore/syft:v{LATEST}
19-
v0.53.4: Pulling from anchore/syft
20-
0d60d5ab2113: Pull complete
21-
26136f3e3dd3: Pull complete
22-
497aa7f04842: Pull complete
23-
Digest: sha256:37e85e8efdeaabb1b6f65c5bc175b664cb05d1aaddd0d922130b8e25d6e49726
24-
Status: Downloaded newer image for anchore/syft:v{LATEST}
25-
docker.io/anchore/syft:v{LATEST}
18+
$ docker buildx imagetools create \
19+
--tag governancecontainerregistry.azurecr.io/syft:v{LATEST} \
20+
docker.io/anchore/syft:v{LATEST}
2621
```
2722
28-
4. Retag the container image
23+
This command preserves all platform images and creates a proper multi-platform manifest in the registry.
2924
30-
```
31-
$ docker tag docker.io/anchore/syft:v{LATEST} governancecontainerregistry.azurecr.io/syft:v{LATEST}
32-
```
33-
34-
5. Push the new image to the registry
35-
36-
```
37-
$ docker push governancecontainerregistry.azurecr.io/syft:v{LATEST}
38-
The push refers to repository [governancecontainerregistry.azurecr.io/syft]
39-
9c858c120b14: Pushed
40-
840f3b941d62: Pushed
41-
21ce82bb7448: Pushed
42-
v{LATEST}: digest: sha256:04ed9c717a814fdccf52758b67333632a0ff16840fc393f5fba5864285eaebbe size: 945
43-
```
44-
45-
6. Update the container reference in [`LinuxScanner`][3]
46-
7. Update [the models][4] that map the Syft output
25+
4. Update the container reference in [`LinuxScanner`][3]
26+
5. Update [the models][4] that map the Syft output
4727
4828
[1]: https://github.com/anchore/syft
4929
[2]: https://github.com/anchore/syft/releases/latest

0 commit comments

Comments
 (0)