Skip to content

Conversation

cx-artur-ribeiro
Copy link
Contributor

@cx-artur-ribeiro cx-artur-ribeiro commented Jul 23, 2025

Closes #7570

Reason for Proposed Changes

  • The support for alpine in checkmarx/kics:alpine Docker tag was no longer available which included the apk package manager, which broke scripts relying on Alpine-based behavior. This occurred because the image previously tagged as alpine was actually based on Wolfi Linux, which does not support apk. The tag was misleading and caused confusion for users expecting a real Alpine Linux base (according to the official documentation).

Proposed Changes

  • Fix misleading alpine tag:
    • Created a proper Dockerfile.alpine using Alpine Linux with apk support;
    • Now, the alpine tag points to a real Alpine image, resolving the user-reported issue;
  • Updated Docker build workflows:
    • latest and v{VERSION} → still use the Wolfi-based image;
    • alpine and v{VERSION}-alpine → now use the new Alpine-based Dockerfile;
    • Updated both release and nightly workflows to support this separation;
  • Alpine image now aligns with other Dockerfile variants (debian and ubi);
  • Alpine image now included in the Go E2E test matrix;
  • Documentation improvements:
    • Added/updated three docs to clearly describe the different image variants and use-cases (docs/dockerhub.md, docs/documentation.md, docs/getting-started.md);

I submit this contribution under the Apache-2.0 license.

Copy link
Contributor

kics-logo

KICS version: v2.1.11

Category Results
CRITICAL CRITICAL 0
HIGH HIGH 0
MEDIUM MEDIUM 0
LOW LOW 0
INFO INFO 0
TRACE TRACE 0
TOTAL TOTAL 0
Metric Values
Files scanned placeholder 1
Files parsed placeholder 1
Files failed to scan placeholder 0
Total executed queries placeholder 47
Queries failed to execute placeholder 0
Execution time placeholder 0

@cx-artur-ribeiro cx-artur-ribeiro changed the title fix(aokmissing): add alpine image build and dockerfile related file fix(apkmissing): add alpine image build and dockerfile related file Jul 23, 2025
@github-actions github-actions bot added the docker Docker query label Jul 23, 2025
@cx-artur-ribeiro cx-artur-ribeiro marked this pull request as ready for review July 24, 2025 08:49
@cx-artur-ribeiro cx-artur-ribeiro requested a review from a team as a code owner July 24, 2025 08:49
Copy link
Contributor

@cx-rui-araujo cx-rui-araujo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@cx-eduardo-semanas cx-eduardo-semanas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@cx-artur-ribeiro cx-artur-ribeiro merged commit 41d9102 into master Jul 30, 2025
26 checks passed
@cx-artur-ribeiro cx-artur-ribeiro deleted the fix-alpine-docker-tag-misleading branch July 30, 2025 10:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

query(dockerfile): does the latest image include apk
4 participants