I am a developer of an open-source software called V2X Hub found. I am having issues with the docker scout image analysis. Manly for our multi-architecture, multi-stage build for some reason docker scout seems to be picking up an incorrect docker base image and then flagging it as outdated. For our docker build, we support both arm and amd64 architectures and build a multi-architecture image. For both we use ubuntu:jammy as a base image which should be up-to-date. For some reason Docker Hub and Docker Scout recognize this correctly for arm and then believe we are using some oisupport/staging-amd64:jammy base image for amd64. Not sure how this is possible or if there is some obscured process that is modifying the base image we use.
As a note to speed up our build and avoid cross-compilation bugs, we build the arm and amd images separately in arm and amd GitHub runners and then combine the images into a multi-architecture image afterwards using ‘docker manifest’. Not sure if this has some impact.
Our entire CI pipeline can be viewed here.
Our Dockerfile can be viewed here
Below are screen shots showing our develop multi-architecture image with two different base images:
I am a developer of an open-source software called V2X Hub found. I am having issues with the docker scout image analysis. Manly for our multi-architecture, multi-stage build for some reason docker scout seems to be picking up an incorrect docker base image and then flagging it as outdated. For our docker build, we support both arm and amd64 architectures and build a multi-architecture image. For both we use ubuntu:jammy as a base image which should be up-to-date. For some reason Docker Hub and Docker Scout recognize this correctly for arm and then believe we are using some oisupport/staging-amd64:jammy base image for amd64. Not sure how this is possible or if there is some obscured process that is modifying the base image we use.
As a note to speed up our build and avoid cross-compilation bugs, we build the arm and amd images separately in arm and amd GitHub runners and then combine the images into a multi-architecture image afterwards using ‘docker manifest’. Not sure if this has some impact.
Our entire CI pipeline can be viewed here.
Our Dockerfile can be viewed here
Below are screen shots showing our develop multi-architecture image with two different base images: