Adam Cmiel

Inconsistent behavior when COPYing multiple files to /dest without trailing slash

9

According to https://docs.docker.com/engine/reference/builder/#copy, > If multiple `` resources are specified, either directly or due to the use of a wildcard, then `` must be a directory, and it must end...

See https://github.com/containerbuildsystem/atomic-reactor/pull/1896 Signed-off-by: Adam Cmiel # Maintainers will complete the following section - [ ] Commit messages are descriptive enough - [ ] Code coverage from testing does not decrease...

Add way to indicate that a component is missing the cryptographic hash

6

**Motivation** As a CycloneDX consumer, I would like the ability to validate whether all the components declared their expected cryptographic hash. In SLSA v0.1, for example, hashes are recommended for...

SBOM: the Syft preset could use a more suitable set of catalogers

3

**Description** The "syft" [SBOM preset](https://www.mankier.com/1/buildah-commit#--sbom) scans both the context directory and the rootfs as plain `dir:`s. Syft selects the default set of catalogers based on what it is scanning: https://github.com/anchore/syft?tab=readme-ov-file#package-cataloger-selection...

SBOM: merge strategies that deduplicate by name+version are suboptimal

1

**Description** The default [merge strategies](https://www.mankier.com/1/buildah-commit#--sbom-merge-strategy) deduplicate SBOM components by name and version. This can result in losing components that are not duplicates. For example: * A package with the same...

fix: don't use FileFetcher.manifest() for git pkgs

6

To get the manifest for a hosted, resolved git package, pacote uses FileFetcher.manifest. FileFetcher.manifest calls extract(), which calls _tarballFromResolved. This means getting the manifest involves nearly a complete pack operation,...

Proposal: adoption of `checkton` (runs ShellCheck on Tekton YAML files)

4

Hi :wave: I made https://github.com/chmeliik/checkton, a GitHub action that runs ShellCheck on scripts embedded in YAML files. The main motivation was to use it on https://github.com/konflux-ci/build-definitions, a decently sized collection...

[feature request] support setting build-time environment variables

13

As developers of a CI system that uses buildah for building (https://konflux-ci.dev/), we have a need to dynamically set environment variables at build time (for the `RUN` instructions in a...

Over at https://github.com/konflux-ci/dockerfile-json, we've been continuing the the development of dockerfile-json (in the [dev](https://github.com/konflux-ci/dockerfile-json/tree/dev) branch for now, hoping that we could get our fixes merged upstream as well) To make...

Bazel in Buildah in container cannot resolve DNS due to empty resolv.conf

4

### Issue Description My Containerfile includes `bazel build` commands. I build the Containerfile using Buildah in a containerized environment (in OpenShift, but the problem is also reproducible with Podman). The...