Comments (1)
We are considering offering a full distroless version of the image (#8657) rather than busybox; it's unlikely we'll provide another variant. Even if someone were to do the work, this is a long term support burden for the project. I'm surprised you find you can't scan a busybox image, that seems like a problem in the scanner or its configuration, which should be fixed, rather than us working around it.
You've mentioned scanners but not what the actual problem is, do you have examples of how this fails? I suspect changing the container base isn't the correct long term answer. For example we could provide an SBOM which may help scanners.
There are various third-party Prometheus images, Chainguard provide one with an SBOM: https://edu.chainguard.dev/chainguard/chainguard-images/reference/prometheus/provenance_info/
I would be curious what your scanners make of that. Obviously we make no guarantees about third-party images, but it may be worth a try in your case.
from prometheus.
Related Issues (20)
- remote write: all samples lost when server returns 500 HOT 1
- Running `promtool` with * from the docker image doesn't behave the same way with snap HOT 4
- How to effectively monitor abnormal occurrences of CPU and memory usage in containers using PrometheusQL expressions?
- API: Consider delivering _info_ level annotation in separate JSON array HOT 1
- [prometheus] Secure Prometheus with enabling Ldap authentication HOT 1
- EC2 service discovery: show scrape pool in targets page when configured but no targets found yet HOT 2
- field path not found in type config.plain HOT 4
- panic: close of closed channel HOT 2
- time shifts, prometheus memory go high and no gc HOT 6
- wrong /-/healthy response when storage is not available HOT 1
- Collected value is not increased and remains frozen? But in scrape target it's increasing. HOT 2
- Mark remote read protocol and serving impl as stable. HOT 1
- The impact of reducing the Prometheus scrape interval HOT 2
- `mergeGenericQuerier` should exit early when the limit is hit
- Prometheus remote_write server returned x-protobuf is not supported HOT 2
- Prometheus alerting endpoints not updated when using kubernetes_sd_config HOT 2
- Prometheus has high memory usage problem HOT 1
- histograms: Handle unknown schemas gracefully and more robust HOT 1
- promql engine does not return expected results with mixed floats+histograms HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from prometheus.