Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

post-build-checks-containers-0.1-6.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: post-build-checks-containers Distribution: openSUSE Tumbleweed
Version: 0.1 Vendor: openSUSE
Release: 6.1 Build date: Thu Jul 23 15:08:23 2026
Group: Development/Tools/Building Build host: reproducible
Size: 1268 Source RPM: post-build-checks-containers-0.1-6.1.src.rpm
Packager: https://bugs.opensuse.org
Url: http://www.suse.com/security
Summary: OBS post-build hooks for Containers
 
OBS post-build hooks to be executed for scanning containers. These hooks mainly
consists of performing actions such as antivirus scans (via ClamAV) or
vulnerability scans (via Trivy, NeuVector), generating artifacts that can later
be attached to relevant OCI container image artifacts as OCI attestations.

Provides

Requires

License

GPL-2.0-only

Changelog

* Thu Jul 23 2026 Marcus Meissner <meissner@suse.com>
  - add a VEX injector
* Mon Jul 20 2026 Marcus Meissner <meissner@suse.com>
  - do not require neuvector-scanner on 16.0 or newer either
* Wed Jul 15 2026 Marcus Meissner <meissner@suse.com>
  - do not use neuvector on 16.0 and newer
* Sun Jun 21 2026 Dirk Müller <dmueller@suse.com>
  - update for new NeuVector code (bsc#1268574)
* Sun Nov 23 2025 Dirk Müller <dmueller@suse.com>
  - scan the generated container, not base containers
  - unpack container before scanning with ClamAV
  - various indentation/linting fixes
* Fri Nov 14 2025 Marcus Meissner <meissner@suse.com>
  - rename clamav output to clamav_vuln.intoto.json
* Wed Nov 05 2025 Marcus Meissner <meissner@suse.com>
  - on openSUSE make it an empty package for now, but provide the
    sources for review
* Sun Oct 26 2025 Marcus Meissner <meissner@suse.com>
  - added use of neuvector scanner, only on x86_64 and aarch64 for now
* Sun Oct 05 2025 Marcus Meissner <meissner@suse.com>
  - Updated from Orchid usecase to be more generic.
* Tue Feb 27 2024 Marcos Bjoerkelund <marcos.bjoerkelund@suse.com>
  - Initial release: Adds hooks to execute clamav and trivy scans after builds

Files

/usr/lib/build
/usr/lib/build/post-build-checks
/usr/lib/build/post-build-checks/80-inject-vex

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Aug 9 15:46:50 2026