zhangzhenyu2

采用快速部署的方式进行部署pip install -r requirements.txt 有异常 Collecting PyYAML==3.11 (from -r requirements.txt (line 12)) Downloading http://pypi.douban.com/simple/packages/04/60/abfb3a665ee0569b60c89148b7187ddd8a36cb65e254fba945ae1315645d/PyYAML-3.11.zip (371kB) 100% |################################| 378kB 60.5MB/s Complete output from command python setup.py egg_info: Traceback (most recent call...

Parameter confirmation of docker _registry scanning

1

src, _ := syft.GetSource(context.Background(), image, syft.DefaultGetSourceConfig().WithSources("registry")) sbom, _ := syft.CreateSBOM(context.Background(), src, syft.DefaultCreateSBOMConfig()) _ = syftjson.NewFormatEncoder().Encode(os.Stdout, *sbom) When syft's above code is scanned by docker, how to distinguish between http and...

GHSA-c5pj-mqfh-rvc3 Still in osv

2

GHSA-c5pj-mqfh-rvc3 "Runc allows an arbitrary systemd property to be injected" is a misunderstood vulnerability. Users do NOT need to update runc https://github.com/opencontainers/runc/issues/4263 but https://storage.googleapis.com/osv-vulnerabilities/index.html?prefix=Go/ Still in osv