osv-scanner Kubernetes, CI & IaC

docker pull ghcr.io/rtvkiz/minimal-osv-scanner:latest-dev

The -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.

Entrypoint

/usr/bin/osv-scanner

User

nonroot (65532)

Working dir

/workspace

Architectures

x86_64, aarch64

Environment

PATH=/usr/bin:/binHOME=/tmp

Labels

org.opencontainers.image.title	minimal-osv-scanner
org.opencontainers.image.description	Hardened shell-less OSV-Scanner (dependency vulnerability scanner) built from source via melange with daily CVE patches
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/osv-scanner
org.opencontainers.image.licenses	Apache-2.0

Entrypoint

/usr/bin/osv-scanner

User

nonroot (65532)

Working dir

/workspace

Architectures

x86_64, aarch64

Environment

PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/binHOME=/tmp

Labels

org.opencontainers.image.title	minimal-osv-scanner-dev
org.opencontainers.image.description	Dev variant of minimal-osv-scanner: same osv-scanner + shell + curl/openssl/dig/jq/git. Not for production.
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/osv-scanner
org.opencontainers.image.licenses	Apache-2.0
dev.minimal.variant	dev